CVE-2026-67332@better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass

Descripción

@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attackers can complete an OAuth flow and obtain access tokens whose audience targets resource servers the authorization never covered, bypassing intended authorization boundaries.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• GitHub Security Advisory (GHSA-p2fr-6hmx-4528) vendor-advisory
• VulnCheck Advisory: @better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass third-party-advisory