CVE-2026-67331 — better-auth SCIM 1.5.0 before 1.7.0-beta.4 Authorization Bypass
better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other u…
Published: 2026-08-01 · CVSS: 8.7 · CVSS 4.0
better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage other users' providers. Attackers can regenerate SCIM bearer tokens, invalidate legitimate tokens, and authenticate to SCIM API routes with the attacker-controlled token.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7