0-click account takeover in Better Auth

Discovery of a zero-click account takeover vulnerability in Better Auth.

Hacker News submitter: bearsyankees

Submitted to Hacker News: 2026-11-03

Original source Hacker News discussion