CVE-2026-67334
better-auth Stale Sessions Persist After User Deletion
CVSS score
5.1
EPSS probability
%0.3
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.4
CVE-2026-67330
better-auth SCIM 1.4.0-beta.27 through 1.6.21 Account Takeover via Provider-ID Collision
B
Patch status unknownEPSS %1
8.8
CVE-2025-71399
Better Auth before 1.4.5 Path Normalization Bypass via rou3
B
Patch verifiedEPSS %1
9.3
CVE-2025-71401
better-auth before 1.4.2 basePath Modification DoS
B
Patch status unknownEPSS %0
8.6
CVE-2026-67328
@better-auth/sso before 1.6.21 Account Takeover via SSO
B
Patch status unknownEPSS %0
8.7
CVE-2026-67327
better-auth before 1.6.22 Account Takeover via Magic-Link Email-OTP
B
Patch status unknownEPSS %0
8.1
CVE-2026-53517
Vulnerability in Better Auth/oauth Provider
B
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-67334"