Vulnerabilities
Better Auth 1.7.7 patch fixes critical OAuth session hijacking flaw
A critical vulnerability in Better Auth allows attackers to hijack sessions by abusing Magic Link and OAuth configurations in versions prior to 1.7.7.
Better Auth
Everything Patch Gazette has reported about Better Auth: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Better Auth 1.7.7 patches critical CVE-2026-110864 flaw enabling OAuth proxy account hijacking
A critical authentication bypass in Better Auth versions prior to 1.7.7 allows attackers to hijack accounts via forged OAuth profiles, prompting an immediate patch recommendation.