CVE-2026-15527

Name of the Vulnerable Software and Affected Versions better-auth better-icons versions prior to 1.0.6

Description A path traversal issue exists within the scan project icons/sync icon component. This occurs when the icons file argument is manipulated, allowing a local attacker to access files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with dot-dot-slash (../) sequences.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.