CVE-2026-67328

highCVSS 8.1covered by 1 sourcefirst seen 2026-08-01

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflected XSS on logout endpoints to gain unauthorized session access and account takeover.

⚡ Watch CVE-2026-67328

Get an email if CVE-2026-67328 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

highCVE-2026-67328: @better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities…nvd · 2026-08-01

External references

NVD record for CVE-2026-67328

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-67328 status](https://www.csirts.com/badge/CVE-2026-67328)](https://www.csirts.com/cve/CVE-2026-67328)