CVE-2025-29927

Name: CVE-2025-29927
Creator: NVD / NIST
Published: 2025-03-21T15:15:42.66+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.1/10EPSS 99.62%

Last modified Jun 17, 2026

CVE-2025-29927 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. EPSS estimates a 99.62% chance of exploitation in the next 30 days.

Description

Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application. This vulnerability is fixed in 12.3.5, 13.5.9, 14.2.25, and 15.2.3.

Metrics

CVSS 3.1

9.1/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Probability

99.62%

99.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Vercel	Next.Js	>= 11.1.4, < 12.3.5
Vercel	Next.Js	>= 13.0.0, < 13.5.9
Vercel	Next.Js	>= 14.0.0, < 14.2.25
Vercel	Next.Js	>= 15.0.0, < 15.2.3

References

https://github.com/vercel/next.js/commit/52a078da3884efe6501613c7834a3d02a91676d2Patch
https://github.com/vercel/next.js/commit/5fd3ae8f8542677c6294f32d18022731eab6fe48Patch
https://github.com/vercel/next.js/releases/tag/v12.3.5Release Notes
https://github.com/vercel/next.js/releases/tag/v13.5.9Release Notes
https://github.com/vercel/next.js/security/advisories/GHSA-f82v-jwr5-mffwVendor Advisory
http://www.openwall.com/lists/oss-security/2025/03/23/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/03/23/4Mailing List
https://security.netapp.com/advisory/ntap-20250328-0002/Third Party Advisory

Timeline

Published: Mar 21, 2025
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2025-29927?

How severe is CVE-2025-29927?

CVE-2025-29927 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 99.62% probability of exploitation in the next 30 days.

How do I fix CVE-2025-29927?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-29927?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST