https://seclists.org/oss-sec/2025/q1/240: CVE-2025-29927: Authorization Bypass in Next.js Middlewa
Published Mar 23, 2025
·Updated
Affected Software
1 affected component
Vercel Next.js
Frequently Asked Questions
1
What is the severity of CVE-2025-29927?
CVE-2025-29927 has been classified as a high severity vulnerability due to its potential for authorization bypass.
2
How do I fix CVE-2025-29927?
To fix CVE-2025-29927, update to the latest version of Vercel Next.js where the vulnerability is patched.
3
What kind of systems are affected by CVE-2025-29927?
CVE-2025-29927 affects applications built with Vercel Next.js that implement middleware improperly.
4
What does CVE-2025-29927 allow an attacker to do?
CVE-2025-29927 allows attackers to bypass authorization checks, potentially gaining unauthorized access to sensitive resources.
5
When was CVE-2025-29927 disclosed?
CVE-2025-29927 was disclosed on March 23, 2025.