What is CVE-2025-29927?

CVE-2025-29927 is a critical security vulnerability in Next.js that allows attackers to bypass middleware authentication by manipulating the x-middleware-subrequest header. It has a CVSS score of 9.1.

Which Next.js versions are affected?

Next.js versions before 15.2.3, 14.2.25, 13.5.9, and 12.3.5 are vulnerable to CVE-2025-29927.

How to fix CVE-2025-29927?

Update Next.js to the latest patched version: 15.2.3+, 14.2.25+, 13.5.9+, or 12.3.5+ depending on your major version.

CVE-2025-29927 Scanner | Next.js Middleware Bypass Vulnerability Detector

Security Scanner

CVE-2025-29927

View on GitLab

Check Your Website Security

Enter your website URL to instantly scan for React2Shell vulnerability and protect your application

Lightning fast

100% Secure

Open source

Vulnerability Detected

example-app.com is vulnerable to CVE-2025-55182

React 18.2.0 detected

Recommended Actions

Update React to version 19.0.1 or higher

This version includes the critical security patch for CVE-2025-55182

Review and update all dependencies

Check all packages that depend on React and ensure they're compatible

Test thoroughly after update

Ensure all functionality works as expected in your production environment

Scan Another

About CVE

Learn more about this vulnerability and its impact

Documentation

Read the technical details and implementation guide

Contribute

Help improve this tool and make it better

10K+

Scans Performed

99.9%

Accuracy Rate

<2s

Average Scan Time

24/7

Always Available

How It Works

1. Enter URL

Provide your website URL for scanning

2. Analyze

Our scanner checks for vulnerabilities

3. Get Results

Receive detailed security report instantly