CVE-2026-109346 | better-auth up to 1.7.0-rc.2 DeviceAuthorization Plugin improper authorization

October 12, 2026 Yanac

A vulnerability categorized as problematic has been discovered in better-auth up to 1.7.0-rc.2. This affects an unknown part of the component DeviceAuthorization Plugin. Executing a manipulation can lead to improper authorization.

This vulnerability is handled as CVE-2026-109346. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More