A vulnerability, which was classified as problematic, was found in better-auth oauth-provider up to 1.6.4/1.7.0-beta.1. This issue affects some unknown processing of the component OAuth Client Creation Endpoint. The manipulation results in incorrect authorization.
This vulnerability is known as CVE-2026-41427. It is possible to launch the attack remotely. No exploit is available.
You should upgrade the affected component.
