Skip to content
Threat Feed
Subscribe

Product

Better-Auth (< 1.1.20)

1 brief RSS
high advisory

Open Redirect Vulnerability in better-auth via trustedOrigins Bypass

The better-auth library contains a vulnerability in its trustedOrigins validation logic that allows attackers to perform open redirects and steal sensitive tokens by manipulating the callbackURL parameter.

better-auth authentication web-security open-redirect cve-2025-71403
1t 1c