Next.js Middleware Authorization Bypass Vulnerability Test Environment (CVE-2025-29927)

📌 Project Overview

This repository provides a local environment for testing the Next.js middleware authorization bypass vulnerability (CVE-2025-29927). This vulnerability allows attackers to bypass middleware security controls by constructing a special x-middleware-subrequest request header.

🚀 Quick Start

Installation Steps

# Clone repository
git clone https://github.com/lem0n817/CVE-2025-29927.git
cd CVE-2025-29927

# Install dependencies
npm install

Launch Environment

npm run build
npm run start

The application will run at http://localhost:3000

⚠️ Disclaimer

This project is intended for:

• Security research
• Vulnerability education
• Defense solution testing