CVE-2026-15527: better-auth better-icons scan_project_icons/sync_icon path traversal

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-13 · updated 2026-10-24
Weakness: CWE-22

Description

A vulnerability has been found in better-auth better-icons up to 1.0.5. This vulnerability affects unknown code of the component scan_project_icons/sync_icon. Such manipulation of the argument icons_file leads to path traversal. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

better-auth better-icons: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5

References

https://github.com/better-auth/better-icons/
https://github.com/better-auth/better-icons/issues/18
https://vuldb.com/cve/CVE-2026-15527
https://vuldb.com/submit/854530
https://vuldb.com/vuln/377865
https://vuldb.com/vuln/377865/cti

Get alerted when CVE-2026-15527 or the next vulnerability affects your stack