CVE-2025-53535 - CVE House
Back to Database
Status published Low CVE-2025-53535

Better Auth has an Open Redirect Vulnerability in originCheck Middleware Affecting Multiple Routes

Vulnerability Description

Better Auth is an authentication and authorization library for TypeScript. An open redirect has been found in the originCheck middleware function, which affects the following routes: /verify-email, /reset-password/:token, /delete-user/callback, /magic-link/verify, /oauth-proxy-callback. This vulnerability is fixed in 1.2.10.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53535

Credits & Attribution

No credits recorded in the NVD database.

References

More from better-auth

View All →
CVE-2025-61928
Better Auth: Unauthenticated API key creation through api-key plugin
Critical 9.3
CVE-2025-27143
Beter Auth has an Open Redirect via Scheme-Less Callback Parameter
Medium 6.9
CVE-2024-56734
Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint
High 7.9

Affected Vendor

better-auth

View all reports →

Affected Software

better-auth
Vulnerable Versions:
< 1.2.10

Timeline

Official Publish: July 7th, 2025
Last Modified: July 7th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-601

MITRE ATT&CK TTPs

T1566 Phishing
Initial Access
T1204 User Execution
Execution
T1071 Application Layer Protocol
Command and Control
T1189 Drive-by Compromise
Initial Access
T1036 Masquerading
Defense Evasion