lem0n817/cve-2025-29927Local testing environment for Next.js middleware authorization bypass vulnerability (CVE-2025-29927). Demonstrates exploitation via crafted x-middleware-subrequest headers for security research and defense testing.
This repository provides a local environment for testing the Next.js middleware authorization bypass vulnerability (CVE-2025-29927). This vulnerability allows attackers to bypass middleware security controls by constructing a special x-middleware-subrequest request header.
# Clone repository
git clone https://github.com/lem0n817/CVE-2025-29927.git
cd CVE-2025-29927
# Install dependencies
npm install
npm run build
npm run start
The application will run at http://localhost:3000
This project is intended for: