CVE-2026-110863 | better-auth up to 1.7.2 SSO providerId improper authentication

SecurityVulns
Yanac

A vulnerability was found in better-auth up to 1.7.2 and classified as critical. The impacted element is an unknown function of the component SSO. The manipulation of the argument providerId results in improper authentication.

This vulnerability was named CVE-2026-110863. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More