Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-29927 | Middleware Authorization Bypass in Vercel Next.js (CVE-2025-29927) | 9.1 | 99% | PoC ×4 |
From the original article
3 min read at helpnetsecurity.com
A critical vulnerability (CVE-2025-29927) in the open source Next. js framework can be exploited by attackers to bypass authorization checks and gain unauthorized access to web pages they should no have access to (e. g.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.