Description
(CVE-2025-29927) Next.js 中间件授权检查绕过漏洞
(CVE-2025-29927) Next.js 中间件授权检查绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-29927
https://github.com/aydinnyunus/CVE-2025-29927
https://www.offsec.com/blog/cve-2025-29927/
https://projectdiscovery.io/blog/nextjs-middleware-authorization-bypass
https://jfrog.com/blog/cve-2025-29927-next-js-authorization-bypass/
https://www.assetnote.io/resources/research/doing-the-due-diligence-analyzing-the-next-js-middleware-bypass-cve-2025-29927
https://securitylabs.datadoghq.com/articles/nextjs-middleware-auth-bypass/
https://www.cnblogs.com/CVE-Lemon/p/18797265
https://blog.nsfocus.net/cve-2025-29927/
https://avd.aliyun.com/detail?id=AVD-2025-29927
https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware