CVE-2025-53535 — Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes

CVE-2025-53535

Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes PUBLISHED

Description (CNA)

Better Auth is an authentication and authorization library for TypeScript. An open redirect has been found in the originCheck middleware function, which affects the following routes: /verify-email, /reset-password/:token, /delete-user/callback, /magic-link/verify, /oauth-proxy-callback. This vulnerability is fixed in 1.2.10.

Affected (CNA)

Vendor / product	Versions
better-auth / better-auth	affected < 1.2.10

CWE

CWE-601

References

https://github.com/better-auth/better-auth/security/advisories/GHSA-36rg-gfq2-3h56

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.