Skip to content
Threat Feed
Subscribe

Product

@Better-Auth/Sso (>= 1.2.10, < 1.6.11)

1 brief RSS
high advisory

@better-auth/sso Authorization Bypass Allows Unauthorized SSO Provider Registration

A high-severity authorization bypass vulnerability (CVE-2026-53515) in `@better-auth/sso` versions `>= 1.2.10, < 1.6.11` allows regular organization members to register new SSO providers for an organization, potentially leading to unauthorized user creation and, under specific configurations, unauthorized administrative access within the target organization.

@better-auth/sso web vulnerability authorization-bypass sso
2t 1c