CVE-2026-121802

The @better-auth/expo package (versions before 1.7.16 ) is vulnerable to account-takeover due to an Origin Validation Error (CWE-346). The flaw exists because the software signs a caller-supplied state value without verifying if that value was originally issued by the server. This can lead to una...