CVE-2026-121802 | better-auth up to 1.7.15 state access control

A vulnerability described as critical has been identified in better-auth up to 1.7.15. Affected is an unknown function. Such manipulation of the argument state leads to improper access controls.

This vulnerability is documented as CVE-2026-121802. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More