A high-severity input validation vulnerability in the better-auth library could allow unauthenticated attackers to bypass security constraints.

This vulnerability is categorized as CWE-20: Improper Input Validation. It stems from the underlying rou3 router library, allowing unauthenticated attackers to potentially bypass path normalization checks.

Successful exploitation could lead to unauthorized access or security bypasses within applications utilizing this library. Given the CVSS score of 8.6, this flaw poses a significant risk to application integrity and access control mechanisms, potentially resulting in data exposure or unauthorized operations.

Immediate Action: Update the better-auth dependency to version 1.4.5 or later within your project environment.

Proactive Monitoring: Monitor application access logs for unusual request patterns, specifically those attempting to traverse directory paths or manipulate URL parameters.

Compensating Controls: Implement strict input validation at the application firewall level to filter non-standard or unexpected URL patterns.

Public Exploit Available: Unknown.

The 8.6 CVSS score reflects a high-risk scenario that requires prompt attention. Developers should prioritize updating the better-auth package to version 1.4.5 to ensure the underlying routing vulnerability is remediated and the application security posture is maintained.