CVE-2026-73421

creationtimestamp| type| source ---|---|--- 2026-08-13 22:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msyohjsrxs2t 2026-08-14 00:00:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/117090919143371675 2026-08-14 00:00:39+00:00| seen|...

CVE-2026-73421 NextAuth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate access by checking only for the existence of the auth object returned by the auth wrapper can fail open when Auth.js has a server configuration error. In middleware, Route...