CVE-2026-67331 in better-authinformação

Sumário

de MITRE • 01/08/2026

better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users' providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API routes with the attacker-controlled token.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

VulnCheck

Reservar

29/07/2026

Divulgação

01/08/2026

Moderação

aceite

Entrada

VDB-385290

CPE

pronto

EPSS

0.00000

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-67331
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-67331
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-67331/

◂ VoltarVisão GeralPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!