Vulnerability
CVE-2025-29927
- First PoC
- 456 days →Metasploit
- 118 days →First cited attacker
Signals
- Exploited in the wild
- Not on KEVNot in CISA's catalogue as of the last daily pull. Absence is not proof of safety.
- EPSS · 30-day forecast
- 99%Chance of exploitation in the next 30 days, 100th percentile of all CVEs. A forecast; KEV outranks it.
- CVSS · NVD
- not stated by sourcesNo NVD record yet.
- Internet exposure
- not stated by sourcesNo exposure census on this CVE's dispatches.
Exploits
128 known · links onlyGitHub PoCs · by trust, then stars125
- aydinnyunus/CVE-2025-29927 ↗Trust ok 100
CVE-2025-29927 Proof of Concept
★ 101 · created 2025-03-23
- AnonKryptiQuz/NextSploit ↗Trust ok 100
NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js
★ 92 · created 2025-03-28
- websecnl/CVE-2025-29927-PoC-Exploit ↗Trust ok 100
Proof-of-Concept for Authorization Bypass in Next.js Middleware
★ 20 · created 2025-03-23
- 6mile/nextjs-CVE-2025-29927 ↗Trust ok 100
A Nuclei template to detect CVE-2025-29927 the Next.js authentication bypass vulnerability
★ 19 · created 2025-03-23
- azu/nextjs-cve-2025-29927-poc ↗Trust ok 100
Next.js PoC for CVE-2025-29927
★ 15 · created 2025-03-23
- lirantal/vulnerable-nextjs-14-CVE-2025-29927 ↗Trust ok 100
★ 14 · created 2025-03-23
- UNICORDev/exploit-CVE-2025-29927 ↗Trust ok 100
Exploit for CVE-2025-29927 (Next.js) - Authorization Bypass
★ 14 · created 2025-04-14
- MuhammadWaseem29/CVE-2025-29927-POC ↗Trust ok 100
Authorization Bypass in Next.js Middleware
★ 10 · created 2025-03-23
- kOaDT/poc-cve-2025-29927 ↗Trust ok 100
This repository contains a proof of concept (POC) and an exploit script for CVE-2025-29927, a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware.
★ 9 · created 2025-03-26
- phoscoder/ghost-route ↗Trust ok 100
Ghost Route detects if a Next JS site is vulnerable to the corrupt middleware bypass bug (CVE-2025-29927)
★ 9 · created 2025-03-25
- gotr00t0day/CVE-2025-29927 ↗Trust ok 100
Next.js Middleware Bypass Scanne
★ 8 · created 2025-04-06
- alihussainzada/CVE-2025-29927-PoC ↗Trust ok 100
PoC for CVE-2025-29927: Next.js Middleware Bypass Vulnerability. Demonstrates how x-middleware-subrequest can bypass authentication checks. Includes Docker setup for testing.
★ 6 · created 2025-03-25
- strobes-security/nextjs-vulnerable-app ↗Trust ok 100
CVE-2025-29927 lab
★ 6 · created 2025-03-24
- fourcube/nextjs-middleware-bypass-demo ↗Trust ok 100
Demo for Next.js middleware bypass - CVE-2025-29927
★ 5 · created 2025-03-24
- HoumanPashaei/CVE-2025-29927 ↗Trust ok 100
This is a CVE-2025-29927 Scanner.
★ 5 · created 2025-04-29
- Ademking/CVE-2025-29927 ↗Trust ok 100
Next.js Middleware Authorization Bypass
★ 4 · created 2025-03-22
- t3tra-dev/cve-2025-29927-demo ↗Trust ok 100
Next.js における認可バイパスの脆弱性 CVE-2025-29927 を再現するデモです。
★ 4 · created 2025-03-23
- 0xWhoknows/CVE-2025-29927 ↗Trust ok 100
Async Python scanner for Next.js CVE-2025-29927. Uses aiohttp & aiofiles to efficiently process large URL lists, detect vulnerabilities, and save results. Features connection pooling, caching, and chunked processing for fast performance
★ 3 · created 2025-03-24
- c0dejump/CVE-2025-29927-check ↗Trust ok 100
script to check cve "CVE-2025-29927" while waiting to add it to HExHTTP
★ 3 · created 2025-03-25
- Eve-SatOrU/POC-CVE-2025-29927 ↗Trust ok 100
CVE-2025-29927 Proof of Concept
★ 3 · created 2025-03-24
- arvion-agent/next-CVE-2025-29927 ↗Trust ok 100
CVE-2025-29927 Authorization Bypass in Next.js Middleware
★ 2 · created 2025-03-24
- emadshanab/CVE-2025-29927 ↗Trust ok 100
New nuclei CVE
★ 2 · created 2025-03-26
- EQSTLab/CVE-2025-29927 ↗Trust ok 100
Next.js middleware bypass exploit
★ 2 · created 2025-04-25
- ferpalma21/nextjs-scanner ↗Trust ok 100
This script scans a list of URLs to detect if they are using **Next.js** and determines whether they are vulnerable to **CVE-2025-29927**. It optionally attempts exploitation using a wordlist.
★ 2 · created 2025-03-29
- jmbowes/NextSecureScan ↗Trust ok 100
Next.js CVE-2025-29927 Vulnerability Scanner
★ 2 · created 2025-03-27
- kh4sh3i/CVE-2025-29927 ↗Trust ok 100
CVE-2025-29927: Next.js Middleware Bypass Vulnerability
★ 2 · created 2025-04-23
- lem0n817/CVE-2025-29927 ↗Trust ok 100
Next.js 中间件授权绕过漏洞测试环境 (CVE-2025-29927)
★ 2 · created 2025-03-24
- lstudlo/nextjs-cve-demo ↗Trust ok 100
演示 Next.js 中的 Middleware 授權繞過漏洞 (CVE-2025-29927) 允許未經授權的用戶存取受保護的資訊。
★ 2 · created 2025-05-15
- nicknisi/next-attack ↗Trust ok 100
A demo of the CVE-2025-29927 vulnerability for a NebraskaJS lightning talk
★ 2 · created 2025-03-26
- Oyst3r1ng/CVE-2025-29927 ↗Trust ok 100
Next.js Middleware Auth Bypass
★ 2 · created 2025-03-24
★ 2 · created 2025-04-21
- RoyCampos/CVE-2025-29927 ↗Trust ok 100
CVE-2025-29927 Exploit Checker
★ 2 · created 2025-03-24
- TheresAFewConors/CVE-2025-29927-Testing ↗Trust ok 100
PowerShell script to test if a web app is vulnerable to CVE-2025-29927
★ 2 · created 2025-03-25
- 0xnxt1me/CVE-2025-29927 ↗Trust ok 100
★ 1 · created 2025-04-08
- alastair66/CVE-2025-29927 ↗Trust ok 100
Next.js Middleware Bypass Vulnerability
★ 1 · created 2025-04-01
- berraesen/nextjs-middleware-auth-bypass-lab ↗Trust ok 100
Bu laboratuvar ortamını sıfırdan kendim oluşturdum. Next.js uygulaması içerisinde giriş, ana sayfa ve admin sayfalarını hazırladım. Middleware ile yetkilendirme mekanizmasını kurduktan sonra Burp Suite kullanarak CVE-2025-29927 zafiyetini kontrollü ortamda gösterdim.
★ 1 · created 2026-08-03
- Bongni/CVE-2025-29927 ↗Trust ok 100
Reproduction and fix of the CVE-2025-29927 vulnerability.
★ 1 · created 2025-10-08
- DanielHallbro/CVE-2025-29927-Nextjs-Bypass-PoC ↗Trust ok 100
A Proof of Concept for CVE-2025-29927 demonstrating a middleware bypass in Next.js versions prior to 13.5.9
★ 1 · created 2026-01-26
- diogolourencodev/middleforce ↗Trust ok 100
Simple script to attempt a Bypass on a server possibly vulnerable to CVE-2025-29927 (Next.js Middleware)
★ 1 · created 2025-10-04
- iteride/CVE-2025-29927 ↗Trust ok 100
★ 1 · created 2025-09-21
- Kamal-418/Vulnerable-Lab-NextJS-CVE-2025-29927 ↗Trust ok 100
★ 1 · created 2025-03-30
- kazuya256/next-js-auth-bypass ↗Trust ok 100
🔓 Next.js Auth Bypass Demo - Educational application demonstrating CVE-2025-29927 middleware authentication bypass vulnerability . ⚠️ For educational use only.[Made using Ai]
★ 1 · created 2025-07-06
- kuzushiki/CVE-2025-29927-test ↗Trust ok 100
CVE-2025-29927の検証
★ 1 · created 2025-03-24
- liamromanis101/CVE-2025-29927-NextJS ↗Trust ok 100
PoC for testing CVE-2025-29927 for Next.js versions 11.x, 12.x <= 12.3.5, 13.x <= 13.5.9, 14.x <=14.2.25, 15.x <= 15.2.3
★ 1 · created 2025-12-02
- m2hcz/PoC-for-Next.js-Middleware ↗Trust ok 100
> 🔓 Proof-of-Concept for a fictional Next.js middleware bypass (CVE-2025-29927) — craft sub-requests to test protected routes.
★ 1 · created 2025-03-27
- mhamzakhattak/CVE-2025-29927 ↗Trust ok 100
★ 1 · created 2025-04-16
- moften/CVE-2025-29927_Next.js_Auth_Bypass ↗Trust ok 100
Next.js Auth Bypass PoC Edge Runtime Env Leak via Middleware Bug
★ 1 · created 2025-05-06
- Nekicj/CVE-2025-29927-exploit ↗Trust ok 100
next.js CVE-2025-29927 vulnerability exploit
★ 1 · created 2025-03-27
- nocomp/CVE-2025-29927-scanner ↗Trust ok 100
python script for evaluate if you are vulnerable or not to next.js CVE-2025-29927
★ 1 · created 2025-03-27
- olimpiofreitas/CVE-2025-29927-scanner ↗Trust ok 100
★ 1 · created 2025-05-03
- pixilated730/NextJS-Exploit- ↗Trust ok 100
CVE-2025-29927
★ 1 · created 2025-04-07
- ricsirigu/CVE-2025-29927 ↗Trust ok 100
A deliberately Next.js app, vulnerable to CVE-2025-29927, Authorization Bypass
★ 1 · created 2025-03-24
- rubbxalc/CVE-2025-29927 ↗Trust ok 100
★ 1 · created 2025-04-29
- sangrok-jeon/CVE-2025-29927-Nextjs-Analysis ↗Trust ok 100
CVE-2025-29927-Nextjs 분석 보고서
★ 1 · created 2026-03-17
- sermikr0/nextjs-middleware-auth-bypass ↗Trust ok 100
CVE-2025-29927
★ 1 · created 2025-09-23
- vulnace/CVE-2025-29927 ↗Trust ok 100
POC for react2shell
★ 1 · created 2026-09-30
- w2hcorp/CVE-2025-29927-PoC ↗Trust ok 100
Here is a simple but effective exploit for CVE-2025-29927.
★ 1 · created 2025-03-29
- yugo-eliatrope/test-cve-2025-29927 ↗Trust ok 100
★ 1 · created 2025-03-26
- 0xb1lal/CVE-2025-29927 ↗Trust ok 100
Next.js CVE-2025-29927 güvenlik açığı hakkında
★ 0 · created 2025-04-01
- 0xcucumbersalad/cve-2025-29927 ↗Trust ok 100
★ 0 · created 2025-03-25
- 0xPb1/Next.js-CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-03-25
- 0xPThree/next.js_cve-2025-29927 ↗Trust ok 100
★ 0 · created 2025-03-25
- adjscent/vulnerable-nextjs-14-CVE-2025-29927 ↗Trust ok 100
do not use. vulnerable
★ 0 · created 2025-09-17
- aleongx/CVE-2025-29927 ↗Trust ok 100
Next.js Acceso no autorizado CVE-2025-29927
★ 0 · created 2025-03-26
- aleongx/CVE-2025-29927_Scanner ↗Trust ok 100
Este script verifica la vulnerabilidad CVE-2025-29927 en servidores Next.js, probando múltiples cargas en la cabecera x-middleware-subrequest para detectar accesos no autorizados.
★ 0 · created 2025-03-27
- all3njk/NextJS_CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-04-04
- amalpvatayam67/day10-nextjs-middleware-lab ↗Trust ok 100
Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
★ 0 · created 2025-09-23
- amitlttwo/Next.JS-CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-06-12
- ayato-shitomi/WebLab_CVE-2025-29927 ↗Trust ok 100
Next.js Auth Bypass Lab ‐ CVE-2025-29927
★ 0 · created 2025-03-30
- b4sh0xf/PoC-CVE-2025-29927 ↗Trust ok 100
→ poc for CVE-2025-29927
★ 0 · created 2025-07-29
- Balajih4kr/cve-2025-29927 ↗Trust ok 100
CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles certain internal headers — specifically, the x-middleware-subrequest header
★ 0 · created 2025-04-05
- bk-security/auth-header-trust-rules ↗Trust ok 100
Semgrep rules that flag header-trust auth bypass patterns (CVE-2025-29927 class). Companion to bk-security.github.io.
★ 0 · created 2026-05-12
- dante01yoon/CVE-2025-29927 ↗Trust ok 100
Next.js CVE-2025-29927 demonstration
★ 0 · created 2025-03-29
- darklotuskdb/nextjs-CVE-2025-29927-hunter ↗Trust ok 100
Next.js CVE-2025-29927 Hunter
★ 0 · created 2025-04-11
- dedibagus/cve-2025-29927-poc ↗Trust ok 100
Authorization Bypass in Next.js Middleware
★ 0 · created 2025-04-01
- EarthAngel666/x-middleware-exploit ↗Trust ok 100
x-middleware exploit for next.js CVE-2023–46298 cache poisoning and CVE-2025-29927 bypass
★ 0 · created 2025-05-08
- elshaheedy/CVE-2025-29927-Sigma-Rule ↗Trust ok 100
Sigma Rule for CVE-2025–29927 Detection
★ 0 · created 2025-03-24
- enochgitgamefied/NextJS-CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-04-16
★ 0 · created 2025-05-23
- ethanol1310/POC-CVE-2025-29927- ↗Trust ok 100
POC CVE-2025-29927
★ 0 · created 2025-04-13
- Ev3rPalestine/0xMiddleware ↗Trust ok 100
CVE-2025-29927: Next.js Middleware Exploit
★ 0 · created 2025-03-30
- fahimalshihab/NextBypass ↗Trust ok 100
Next.js Middleware Authorization Bypass Tool (CVE-2025-29927)
★ 0 · created 2025-04-03
- Fomovet/cve-2025-29927 ↗Trust ok 100
POC for CVE-2025-29927
★ 0 · created 2026-06-21
- furmak331/CVE-2025-29927 ↗Trust ok 100
Critical vulnerability in next.js : Bypass middleware authentication
★ 0 · created 2025-03-25
- gadaugherty/larkspur-billing ↗Trust ok 100
Synthetic-data billing portal pinned to next@14.2.24 (CVE-2025-29927) — test customer for oopsie
★ 0 · created 2026-10-10
- gitgudKrish/cve-2025-29927-nextjs ↗Trust ok 100
★ 0 · created 2026-05-20
- Gokul-Krishnan-V-R/cve-2025-29927 ↗Trust ok 100
Next.js and the corrupt middleware...TRY TO HACK IT..!
★ 0 · created 2025-04-02
- Grand-Moomin/Vuln-Next.js-CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-04-18
- Heimd411/CVE-2025-29927-PoC ↗Trust ok 100
★ 0 · created 2025-03-27
- Hirainsingadia/CVE-2025-29927 ↗Trust ok 100
Next js middlewareauth Bypass
★ 0 · created 2025-04-28
- hujiaozhuzhu/CVE-2025-29927__Next.js ↗Trust ok 100
CVE-2025-29927 - Next.js漏洞测试工具
★ 0 · created 2026-04-02
- iSee857/CVE-2025-29927 ↗Trust ok 100
Next.Js 权限绕过漏洞(CVE-2025-29927)
★ 0 · created 2025-03-24
- jeymo092/cve-2025-29927 ↗Trust ok 100
★ 0 · created 2025-03-25
- JOOJIII/CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-04-01
Simulates CVE-2025-29927, a critical Next.js vulnerability allowing attackers to bypass middleware authorization by exploiting the internal x-middleware-subrequest HTTP header. Demonstrates unauthorized access to protected routes and provides mitigation strategies.
★ 0 · created 2025-04-16
- kuyrathdaro/cve-2025-29927 ↗Trust ok 100
★ 0 · created 2026-08-29
- l1uk/nextjs-middleware-exploit ↗Trust ok 100
Research on Next.js middleware vulnerability (CVE-2025-29927) allowing authorization bypass and potential exploits.
★ 0 · created 2025-04-09
- lucaschanzx/CVE-2025-29927-PoC ↗Trust ok 100
★ 0 · created 2025-10-27
- maronnjapan/claude-create-CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-03-25
- metasploit403/cve-2025-29927-lab ↗Trust ok 100
Deliberately vulnerable Next.js application demonstrating CVE-2025-29927 (middleware-based auth bypass) for learning and bug bounty practice.
★ 0 · created 2026-04-02
- mickhacking/Thank-u-Next ↗Trust ok 100
CVE-2025-29927 PoC | Auth Bypass Exploit | Python Tool using httpx | Middleware Vulnerability | Ethical Hacking Toolkit
★ 0 · created 2025-07-14
- MKIRAHMET/CVE-2025-29927-PoC ↗Trust ok 100
This repository contains **research and analysis** related to CVE-2025-29927. It demonstrates safe, controlled testing approaches for a path traversal/middleware misconfiguration vulnerability in web applications.
★ 0 · created 2025-09-11
A basic proof of concept of the CVE-2025-29927 vulnerability that allows to bypass the middleware scripts.
★ 0 · created 2025-04-02
- Nayekah/Next.js-Proof-of-Concept ↗Trust ok 100
Some Proof-of-Concept (POCs) for CVE-2025-29927, CVE-2026-27978, and CVE-2026-29057 in Next.js.
★ 0 · created 2026-04-25
- NS-Projects-Unina/CTF_CVE_DSP_1 ↗Trust ok 100
Una CTF, in formato DSP-compliant, basata sulla CVE-2025-29927 di nextjs.
★ 0 · created 2025-10-15
- pickovven/vulnerable-nextjs-14-CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-04-08
★ 0 · created 2025-08-19
- rgvillanueva28/vulnbox-easy-CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-07-30
- Ritinify/CVE-2025-29927-PoC ↗Trust ok 100
★ 0 · created 2026-09-05
- s11s11/CVE-2025-29927 ↗Trust ok 100
Demo of CVE-2025-29927 for secure programming class
★ 0 · created 2025-08-17
- sagsooz/CVE-2025-29927 ↗Trust ok 100
🔐 Python-based smart scanner for CVE-2025-29927 — Next.js middleware authentication bypass vulnerability. Detects meta refresh, keyword-based redirects, and more.
★ 0 · created 2025-05-26
- sdrtba/CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-09-20
- serhalp/test-cve-2025-29927 ↗Trust ok 100
Verify Next.js CVE-2025-29927 on Netlify not vulnerable
★ 0 · created 2025-03-22
- shahin-shadow/nextjs-auth-bypass ↗Trust ok 100
Analysis and exploitation of a Next.js authorization bypass vulnerability (CVE-2025-29927)
★ 0 · created 2026-04-04
- Si-Ni/CVE-2025-29927-Proof-of-Concept ↗Trust ok 100
Capture the Flag challenge: CVE-2025-29927 in combination with a command injection vulnerability
★ 0 · created 2026-02-01
- SugiB3o/vulnerable-nextjs-14-CVE-2025-29927 ↗Trust ok 100
vulnerable-nextjs-14-CVE-2025-29927
★ 0 · created 2025-05-29
- sungue1/CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2026-10-07
- SwapnilDeshpande/cve-2025-29927-lab ↗Trust ok 100
Reproduction lab for CVE-2025-29927 — Next.js middleware authorization bypass (CVSS 9.1)
★ 0 · created 2026-06-10
- TheWaterbug/alpr-dashboard-patches ↗Trust ok 100
Runtime patches for algertc/alpr-dashboard: async logger fix and CVE-2025-29927 nginx mitigation
★ 0 · created 2026-04-24
- ticofookfook/poc-nextjs-CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2025-03-23
- Toddkk02/CVE-2025-29927 ↗Trust ok 100
★ 0 · created 2026-03-17
- ValGrace/middleware-auth-bypass ↗Trust ok 100
CVE-2025-29927 ~ a poc of the next.js middleware authentication bypass
★ 0 · created 2025-04-08
- YEONDG/nextjs-cve-2025-29927 ↗Trust ok 100
vulnerable-nextjs-14-CVE-2025-29927
★ 0 · created 2025-04-06
- yuzu-juice/CVE-2025-29927_demo ↗Trust ok 100
This repository is for educational and research purposes.
★ 0 · created 2025-03-28
- zs1n/CVE-2025-29927 ↗Trust ok 100
PoC | NextJS Middleware 15.2.2 - Authorization Bypass
★ 0 · created 2025-08-28
Fake proof-of-concept repositories have been used to deliver malware to the researchers who run them. The trust verdict is our engine's heuristic over the repository (account age, what it ships, how its stars arrived); it is a reason to read the code first, not a finding about its author.
Metasploit1
This module detects self-hosted Next.js applications affected by CVE-2025-29927, an authorization bypass in the middleware layer. Next.js tags its own internal subrequests with the x-middleware-subrequest header and skips middleware when it sees it. The header is trusted without verifying it originated internally, so an external client that supplies it causes middleware to be skipped entirely, bypassing any authentication, authorization
ruby · seen 2026-10-18
Exploit-DB1
created 2025-04-05
Nuclei1
Next.js contains a critical middleware bypass vulnerability affecting versions 11.1.4 through 15.2.2. Attackers may bypass middleware by sending a crafted x-middleware-subrequest header. This template requires a baseline middleware redirect before accepting a bypass 200 response.
yaml · seen 2026-10-18
On the wire
0 dispatchesNo dispatch on our wire has named this CVE yet.
Watch this one?
KEV additions reach Telegram and the KEV-only RSS as they land.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.