Tag
#OAuth
Zero-Click Account Takeover via OAuth Identity Linking to Unverified Email Accounts
CVE-2026-35511 is an 8.7 severity vulnerability in Authorizer that allows for zero-click account takeover via OAuth identity linking to unverified email accounts. An attacker can pre-register with a victim's email address without verifying it and gain persistent password-based access to the victim's account after the victim completes a normal OAuth login.
Understanding the OAuth Refresh-Token Rotation Vulnerability in Better Auth
This educational analysis covers a critical vulnerability in the Better Auth library, specifically in its OAuth refresh-token rotation mechanism. The vulnerability, identified as CVE-2026-53517, allows an attacker to fork a refresh-token family from a single parent token, leading to indefinite access. We will delve into the root cause, attack surface, exploitation mechanics, real-world impact, and defensive strategies.