CyberRota Analysis
AI-GeneratedVersions of better-auth prior to 1.1.20 are vulnerable due to a bypass in the trustedOrigins validation, allowing attackers to manipulate callbackURL parameters. This flaw can lead to open redirects, enabling the theft of sensitive tokens and potential account takeover. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account takeover.