CVE-2026-67336 | better-auth up to 1.6.10 oidcProvider/mcp data authenticity

A vulnerability, which was classified as critical, has been found in better-auth up to 1.6.10. This impacts an unknown function of the component oidcProvider/mcp. The manipulation leads to insufficient verification of data authenticity.

This vulnerability is referenced as CVE-2026-67336. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More