THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80192 (HIGH 8.1) — @better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line) contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authe

[NVD] CVE-2026-80192 (HIGH 8.1) — @better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line) contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authe

mednvdPublished 2026-08-26

CVE-2026-80192 CVSS: 8.1 HIGH Published: 2026-08-26T05:18:26.460

@better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line) contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organization owner/administrator to register

Indicators of compromise

CVE-2026-80192cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80192