PT-2026-57614 · Better Auth · Better-Icons

Mcfly_Zhang · Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-15527

NVD

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

A vulnerability has been found in better-auth better-icons up to 1.0.5. This vulnerability affects unknown code of the component scan project icons/sync icon. Such manipulation of the argument icons file leads to path traversal. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-15527

Affected Products

Better-Icons

References · 7

• 🔥 https://github.com/better-auth/better-icons/issues/18 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15527 · Security Note
• https://vuldb.com/submit/854530 · Note
• https://vuldb.com/vuln/377865 · Note
• https://vuldb.com/cve/CVE-2026-15527 · Note
• https://github.com/better-auth/better-icons · Note
• https://vuldb.com/vuln/377865/cti · Note