CVE-2026-67331 in better-authinfo

Summary

by MITRE • 08/01/2026

better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users' providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API routes with the attacker-controlled token.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

VulnCheck

Reservation

07/29/2026

Disclosure

08/01/2026

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-67331
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-67331
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-67331/

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!