
Vulnerabilities
Better Auth OAuth flaw lets attackers bypass login as any user
Unauthenticated attackers can hijack sessions in Better Auth versions before 1.7.7 by reusing OAuth state values as magic link tokens.
Everything NetSec Tribune has reported about OAuth: 2 stories, newest first. Part of our Cloud Security coverage.

Unauthenticated attackers can hijack sessions in Better Auth versions before 1.7.7 by reusing OAuth state values as magic link tokens.

Default SaaS settings and weak identity policies create silent entry points that attackers exploit long before any network perimeter is breached.