CVE-2026-67332

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-67332
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-67332.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-67332
Aliases
Published
2026-08-01T12:22:18.036Z
Modified
2026-08-03T03:30:25.196710514Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N CVSS Calculator
Summary
@better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass
Details

@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attackers can complete an OAuth flow and obtain access tokens whose audience targets resource servers the authorization never covered, bypassing intended authorization boundaries.

Database specific 
{
    "cwe_ids": [
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67332.json",
    "cna_assigner": "VulnCheck"
}
References

Affected packages

Git / github.com/better-auth/better-auth

Affected ranges

Type
GIT
Repo
https://github.com/better-auth/better-auth
Events
Introduced
148b32e0cb5e143d31f070eaa2781d0cf471b928
Fixed
a5e2442e3cc8aeac7542c9237d24b8c3ea3d6dd2
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ],
    "extracted_events": [
        {
            "introduced": "1.4.8"
        },
        {
            "fixed": "1.7.0-beta.4"
        },
        {
            "introduced": "0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-67332.json"