r3versein/nextjs-middleware-vulnerable-appdemo-cve-2025-29927Intentionally vulnerable Next.js application demonstrating CVE-2025-29927 middleware authorization bypass, designed for security testing and educational practice.
This is a Next.js application intentionally designed to be vulnerable to CVE-2025-29927: The Next.js Middleware Authorization Bypass Vulnerability.
This application is for educational and ethical hacking purposes only. Do not deploy it to a production environment. The vulnerabilities are intentional and are meant to be used for security testing and practice.
First, run the development server:
npm run dev
# or
yarn dev
# or
pnpm dev
# or
bun dev
Open http://localhost:3000 with your browser to see the result.