{"id":"CVE-2025-71403","revision":"9be89806733f40a2b781ed3689d2694d","records":[{"revision":"9be89806733f40a2b781ed3689d2694d","observedAt":"2026-10-25T04:17:18.34+00:00","statement":{"source":"nvd","id":"CVE-2025-71403","aliases":[],"title":"better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger …","description":"better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger open redirects to steal sensitive tokens for account takeover.","state":0,"publishedAt":"2026-08-01T13:16:56.607+00:00","modifiedAt":"2026-10-06T22:10:00.247+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · disclosure@vulncheck.com · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":7.1,"severity":"HIGH"},{"system":"CVSS 3.1 · disclosure@vulncheck.com · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N","score":7.1,"severity":"HIGH"}],"references":["https://github.com/better-auth/better-auth/security/advisories/GHSA-vp58-j275-797x","https://www.vulncheck.com/advisories/better-auth-before-open-redirect-via-trustedorigins-bypass"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-71403","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-601"],"productCriteria":[],"sourceDates":{"published":"2026-08-01T13:16:56.607","lastModified":"2026-10-06T22:10:00.247"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-71403","identifiers":["CVE-2025-71403"]},"retained":false,"historicalAffected":[]}],"coverage":[]}