CVE-2026-53515 | better-auth Better Auth up to 1.6.10 SSO Plugin sso/register registerSSOProvider providerId improper authorization

A vulnerability identified as critical has been detected in better-auth Better Auth up to 1.6.10. The impacted element is the function registerSSOProvider of the file sso/register of the component SSO Plugin. Performing a manipulation of the argument providerId results in improper authorization.

This vulnerability was named CVE-2026-53515. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More