Advisory and information hub for the Next.js middleware authorization bypass CVE-2025-29927, including a link to technical analysis and details.
Proof-of-concept exploit for CVE-2025-29927 that adds x-middleware-subrequest to bypass Next.js middleware authentication checks.
A Nuclei template to detect CVE-2025-29927 the Next.js authentication bypass vulnerability
Next.js Middleware Authorization Bypass
do not use. vulnerable
PoC for CVE-2025-29927: Next.js Middleware Bypass Vulnerability. Demonstrates how x-middleware-subrequest can bypass authentication checks. Includes Docker setup for testing.
Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
Scans Next.js applications to detect and verify CVE-2025-29927 authentication bypass vulnerability with high accuracy and concurrent scanning.
Next.js PoC for CVE-2025-29927
Reproduction and fix of the CVE-2025-29927 vulnerability.
A Proof of Concept for CVE-2025-29927 demonstrating a middleware bypass in Next.js versions prior to 13.5.9
Demonstration of CVE-2025-29927: Next.js middleware authentication bypass via x-middleware-subrequest header spoofing. Includes vulnerable and fixed app examples for security education.
Next.js CVE-2025-29927 Hunter
Sigma rule for detecting CVE-2025-29927 exploitation via suspicious x-middleware-subrequest HTTP headers in Next.js applications, with detection strategies and mitigation guidance.
Intentionally vulnerable Next.js application demonstrating CVE-2025-29927 authentication bypass via middleware WAF evasion. Designed for security research, penetration testing labs, and responsible disclosure demos with MySQL backend and JWT authentication.
Docker-based lab for exploring and reproducing the Next.js CVE-2025-29927 middleware authorization bypass vulnerability. Includes vulnerable app, reproduction steps, and mitigation strategies for educational security research.
CVE-2025-29927: Next.js Middleware Exploit
CVE-2025-29927 Proof of Concept
Critical vulnerability in next.js : Bypass middleware authentication
Educational demo of CVE-2025-29927, a critical Next.js middleware authentication bypass. Includes a vulnerable admin panel, proof-of-concept exploit commands, and mitigation guidance for security training.
Proof-of-concept exploit for CVE-2025-29927, a Next.js middleware bypass vulnerability. Includes version fingerprinting, configurable header manipulation, and success detection heuristics for testing authentication bypass.
Automated proof-of-concept exploit for CVE-2025-29927, a Next.js middleware authorization bypass. Includes single-target and batch scanning, detailed logging, and a Docker-based vulnerable environment for testing.
In-depth analysis and PoC for CVE-2025-29927, a Next.js middleware authorization bypass via the x-middleware-subrequest header. Includes Nuclei templates and a mass-scanning script for testing.
Proof-of-concept exploit for CVE-2025-29927, a Next.js middleware bypass vulnerability. Includes version-specific payloads and a Docker-based lab for testing unauthorized access to protected routes.
Test application for CVE-2025-29927, designed for security study groups to demonstrate and verify the web vulnerability in a controlled environment.
Local testing environment for Next.js middleware authorization bypass vulnerability (CVE-2025-29927). Demonstrates exploitation via crafted x-middleware-subrequest headers for security research and defense testing.
PoC for testing CVE-2025-29927 for Next.js versions 11.x, 12.x <= 12.3.5, 13.x <= 13.5.9, 14.x <=14.2.25, 15.x <= 15.2.3
Reproduction environment for CVE-2025-29927, demonstrating Next.js middleware authorization bypass via the x-middleware-subrequest header. Includes curl-based exploitation steps for multiple Next.js versions.
演示 Next.js 中的 Middleware 授權繞過漏洞 (CVE-2025-29927) 允許未經授權的用戶存取受保護的資訊。
Tests and demonstrates CVE-2025-29927, a Next.js middleware authorization bypass. Includes exploitation and normal access test scripts, plus remediation guidance.
Deliberately vulnerable Next.js application demonstrating CVE-2025-29927 (middleware-based auth bypass) for learning and bug bounty practice.
This repository contains **research and analysis** related to CVE-2025-29927. It demonstrates safe, controlled testing approaches for a path traversal/middleware misconfiguration vulnerability in web applications.
Some Proof-of-Concept (POCs) for CVE-2025-29927, CVE-2026-27978, and CVE-2026-29057 in Next.js.
python script for evaluate if you are vulnerable or not to next.js CVE-2025-29927
Python scanner that detects Next.js instances vulnerable to CVE-2025-29927, identifies versions, and tests for authentication bypass via the x-middleware-subrequest header with multi-threaded parallel scanning.
CTF challenge to learn and practice exploiting the Next.js middleware bypass vulnerability (CVE-2025-29927) by finding a flag in an admin page.
A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass
Functional exploit for CVE-2025-29927, a critical Next.js middleware authorization bypass. Sends crafted HTTP requests with the x-middleware-subrequest header to skip authentication checks on protected routes.
🔐 Python-based smart scanner for CVE-2025-29927 — Next.js middleware authentication bypass vulnerability. Detects meta refresh, keyword-based redirects, and more.
Proof-of-concept and mass scanning toolkit for CVE-2025-29927, a Next.js middleware authorization bypass via forged x-middleware-subrequest header. Includes nuclei templates and Python scanner.
Capture the Flag challenge: CVE-2025-29927 in combination with a command injection vulnerability
Reproduction lab for CVE-2025-29927 — Next.js middleware authorization bypass (CVSS 9.1)
Next.js における認可バイパスの脆弱性 CVE-2025-29927 を再現するデモです。
PowerShell script to test if a web app is vulnerable to CVE-2025-29927
CVE-2025-29927 - Critical Security Vulnerability in Next.js
Exploit for CVE-2025-29927 (Next.js) - Authorization Bypass
Here is a simple but effective exploit for CVE-2025-29927.
PoC | NextJS Middleware 15.2.2 - Authorization Bypass
Python-based scanner that detects CVE-2025-29927 middleware bypass vulnerability in Next.js sites by sending a crafted x-middleware-subrequest header to protected paths.
Proof-of-concept exploit for CVE-2025-29927, a Next.js middleware authorization bypass. Includes a vulnerable target lab and Python script to verify the bypass by sending crafted x-middleware-subrequest headers.
New nuclei CVE
This script scans a list of URLs to detect if they are using **Next.js** and determines whether they are vulnerable to **CVE-2025-29927**. It optionally attempts exploitation using a wordlist.
Next.js Middleware Bypass Scanne
Next.js CVE-2025-29927 Vulnerability Scanner
CVE-2025-29927: Next.js Middleware Bypass Vulnerability
Proof-of-Concept for Authorization Bypass in Next.js Middleware
Proof-of-concept for CVE-2025-29927 that bypasses Next.js middleware authentication by sending a crafted x-middleware-subrequest header to protected API endpoints.
Reproduces CVE-2025-29927 middleware authorization bypass in Next.js 14.2.24 and demonstrates exploitation with curl to bypass authentication and middleware restrictions.
Async Python scanner that detects CVE-2025-29927 in Next.js apps by processing URL lists with aiohttp, connection pooling, caching, and chunked result saving.
Next.js Middleware Bypass Vulnerability
Next.js Acceso no autorizado CVE-2025-29927
Este script verifica la vulnerabilidad CVE-2025-29927 en servidores Next.js, probando múltiples cargas en la cabecera x-middleware-subrequest para detectar accesos no autorizados.
Demonstrates the x-middleware-subrequest header bypass in Next.js 13.4.19, allowing unauthorized access to protected routes. Includes setup, normal flow, and curl-based exploitation steps.
NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js
CVE-2025-29927 Authorization Bypass in Next.js Middleware
Next.js Auth Bypass Lab ‐ CVE-2025-29927
CVE-2025-29927 Proof of Concept
→ poc for CVE-2025-29927
CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles certain internal headers — specifically, the x-middleware-subrequest header
Bu laboratuvar ortamını sıfırdan kendim oluşturdum. Next.js uygulaması içerisinde giriş, ana sayfa ve admin sayfalarını hazırladım. Middleware ile yetkilendirme mekanizmasını kurduktan sonra Burp Suite kullanarak CVE-2025-29927 zafiyetini kontrollü ortamda gösterdim.
script to check cve "CVE-2025-29927" while waiting to add it to HExHTTP
Authorization Bypass in Next.js Middleware
Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware)
x-middleware exploit for next.js CVE-2023–46298 cache poisoning and CVE-2025-29927 bypass
Next.js middleware bypass exploit
Proof-of-concept exploit for CVE-2025-29927, demonstrating a middleware authentication bypass in self-hosted Next.js applications via crafted HTTP headers.
Next.js Middleware Authorization Bypass Tool (CVE-2025-29927)
POC for CVE-2025-29927
Demonstrates a middleware bypass vulnerability (CVE-2025-29927) in Next.js, showing how to exploit the x-middleware-subrequest header to access protected routes.
Next.js and the corrupt middleware...TRY TO HACK IT..!
Deliberately vulnerable Next.js application demonstrating CVE-2025-29927 middleware bypass exploit for security testing and educational practice.
Reproduction of CVE-2025-29927 authorization bypass in Next.js middleware, with curl-based exploitation payloads for multiple versions.
Python-based proof-of-concept exploit for CVE-2025-29927, a Next.js privilege bypass vulnerability. Supports single-target and batch scanning with configurable paths and threading.
Proof-of-concept exploit for CVE-2025-29927 in Next.js 15.2.0, demonstrating a specific web application vulnerability for testing and educational purposes.
Deliberately vulnerable Next.js application designed for practicing exploitation of CVE-2025-29927, with a tutorial video for guided learning.
🔓 Next.js Auth Bypass Demo - Educational application demonstrating CVE-2025-29927 middleware authentication bypass vulnerability . ⚠️ For educational use only.[Made using Ai]
Simulates CVE-2025-29927, a critical Next.js vulnerability allowing attackers to bypass middleware authorization by exploiting the internal x-middleware-subrequest HTTP header. Demonstrates unauthorized access to protected routes and provides mitigation strategies.
This repository contains a proof of concept (POC) and an exploit script for CVE-2025-29927, a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware.
Proof-of-concept exploit for CVE-2025-29927, demonstrating the vulnerability and its impact for security research and testing.
Research on Next.js middleware vulnerability (CVE-2025-29927) allowing authorization bypass and potential exploits.
Proof-of-concept exploit for CVE-2025-29927, demonstrating the vulnerability and providing a working exploit for security testing and validation.
> 🔓 Proof-of-Concept for a fictional Next.js middleware bypass (CVE-2025-29927) — craft sub-requests to test protected routes.
CTF-style proof-of-concept demonstrating CVE-2025-29927 Next.js middleware authorization bypass. Includes vulnerable Docker app and exploit script to retrieve flag from protected route.
CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit
Next.js Auth Bypass PoC Edge Runtime Env Leak via Middleware Bug
Authorization Bypass in Next.js Middleware
A basic proof of concept of the CVE-2025-29927 vulnerability that allows to bypass the middleware scripts.
next.js CVE-2025-29927 vulnerability exploit
A demo of the CVE-2025-29927 vulnerability for a NebraskaJS lightning talk
Una CTF, in formato DSP-compliant, basata sulla CVE-2025-29927 di nextjs.
