CVE-2026-67333 | better-auth up to 1.6.12/1.7.0-beta.3 Oidc-provider redirect_uris

A vulnerability was found in better-auth up to 1.6.12/1.7.0-beta.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Oidc-provider. Such manipulation of the argument redirect_uris leads to open redirect.

This vulnerability is listed as CVE-2026-67333. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More