CVE-2025-29927

CVE-2025-29927 ★ CVE-2025-29927 Next.js middleware bypass PoC ★ Description CVE-2025-29927 : Next.js middleware bypass PoC description: Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it i...

CVE-2025-29927

Introduction Bypass Next.js middleware authentication mechanism by forging the x-middleware-subrequest request header, allowing unauthorized access to protected routes. Environment setup Source code derived from P神, Next.js version 15.2.2 For Next.js 15.x, this issue is fixed in 15.2.3...

CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions root@kitploit: Next.js...

CVE-2025-29927-POC

CVE-2025-29927-POC Introduction This repository contains a Proof of Concept PoC for CVE-2025-29927, a hypothetical vulnerability demonstrating a flaw in middleware handling within a web application. The PoC illustrates how a specially crafted HTTP request can bypass redirection logic to access...

CVE-2025-29927-Testing

Testing script for CVE-2025-29927 Provided by CyberMaxx. CVE-2025-29927 Tester This PowerShell script is designed to help security researchers and system administrators test for CVE-2025-29927 vulnerabilities in Next.js applications. It checks whether a target application is vulnerable to the...

next-js-auth-bypass

Hello World - Next.js 12.2 A simple proof of concept Next.js 12.2 application. 🚀 Quick Start 1. Install Dependencies root@kitploit: npm install 2. Run the Development Server root@kitploit: npm run dev The application will be available at http://localhost:3000 🛠️ Available Scripts npm run dev -...

vulnerable-nextjs-14-CVE-2025-29927

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint...

nextjs-cve-2025-29927

Next.js CVE-2025-29927 Middleware Vulnerability This repository is a monorepo project that allows you to compare the CVE-2025-29927 middleware vulnerability between Next.js versions 15.2.3 and 15.1.7. Vulnerability Description CVE-2025-29927 is a security vulnerability discovered in Next.js...

CVE-2025-29927-Sigma-Rule

CVE-2025-29927 Report Overview CVE-2025-29927 is a security vulnerability in Next.js middleware, allowing attackers to bypass authentication by modifying specific HTTP headers. Exploitation Attackers can send a request with the header x-middleware-subrequest: middleware to bypass authentication...

Thank-u-Next

Thank u Next – CVE-2025-29927 Exploit Tool 🧠 What is CVE-2025-29927? It’s not just a bypass — it’s a revelation. A single header, misunderstood and mishandled by middleware logic, becomes a master key to what was meant to be locked. CVE-2025-29927 exploits a misconfigured middleware authorization...

nextjs-middleware-exploit

Next.js Middleware Vulnerability Research CVE-2025-29927 This repository demonstrates a critical vulnerability in Next.js middleware CVE-2025-29927, which affects versions 11.1.4 through 15.1.7. This vulnerability allows for authorization bypass , CSP bypass , and potential DoS attacks through...

vulnerable-nextjs-14-CVE-2025-29927

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint...

CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 — Next.js Middleware / RSC Bypass Analysis The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a small laboratory and Proof-of-Concept analysis fo...

CVE-2025-29927

CVE-2025-29927 - Demo for Introdcution to Secure Programming 00960267 Background This is a demo of CVE-2025-29927, a critical vulnerability in Next.js that allowed bypassing the middleware with a certain header. The header x-middleware-subrequest was intended to prevent infinite middleware loops...

CVE-2025-29927-PoC

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This repository contains a Proof of Concept PoC exploit for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks by abusing a middleware-specific HTTP header. Overview CVE ID:...

CVE-2025-29927

Next.js CVE-2025-29927 This repository contains a proof of concept for CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be exploited to bypass middleware checks such as authentication. Affected Versions Next.js 15.x 🧪 This project was tested with...

CVE-2025-29927

🕷️ Next.js CVE-2025-29927 🧑🏻‍💼 Legal Disclaimer This project is a Next.js application that has been intentionally configured to be vulnerable to an Authorization Bypass in Next.js Middleware CVE-2025-29927. It is provided solely for lawful, educational, and research purposes. By accessing, using,...

nextjs-cve-demo

Example: Authorization Bypass in Next.js Middleware CVE-2025-29927 This Repo provides example projects demonstrating the Middleware authorization bypass vulnerability in Next.js CVE-2025-29927. This vulnerability allows unauthorized users to access protected resources. Vulnerability Overview...

Vuln-Next.js-CVE-2025-29927

root@kitploit: npx [email protected] Install packages root@kitploit: npm install -D @types/bcrypt npm install mysql2 npm install jose npm install -D @types/jsonwebtoken Prepare DB root@kitploit: CREATE TABLE users id INT PRIMARY KEY AUTOINCREMENT, username VARCHAR255 UNIQUE NOT NULL, passwor...

next.js_cve-2025-29927

next.jscve-2025-29927 A small and simple Next.js application running version 14.2.24 used to test CVE-2025-29927. Access the admin area /admin by utilizing the vulnerability or the hardcoded credentials admin:admin. root@kitploit: » git clone...