CVE-2026-53513 | better-auth Better Auth up to 1.6.10 SSO Plugin /sso/register userInfoEndpoint/tokenEndpoint/jwksEndpoint input validation

July 15, 2026 Yanac

A vulnerability identified as critical has been detected in better-auth Better Auth up to 1.6.10. This issue affects some unknown processing of the file /sso/register of the component SSO Plugin. This manipulation of the argument userInfoEndpoint/tokenEndpoint/jwksEndpoint causes improper input validation.

The identification of this vulnerability is CVE-2026-53513. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More