Do Son CVE-2026-53513 is a Better Auth SSRF flaw (CVSS 9.6) in the SSO plugin. It exposes cloud metadata and enables account takeover. Patch to 1.6.11 now.
Better Auth
A normalization flaw in Better Auth's router allows attackers to bypass access controls and rate limits using simple double-slash URLs.
A Critical (CVSS 9.3) flaw (CVE-2025-61928) in Better Auth allows unauthenticated attackers to create/modify API keys for any user, risking full account compromise.
Learn about the Better Auth vulnerability that allows attackers to bypass security measures and take over user accounts.