CVE-2025-29927

[aydinnyunus]

🚨 Security Advisory: CVE-2025-29927 – Next.js Middleware Bypass

Summary:
A security vulnerability (CVE-2025-29927) has been identified in Next.js, affecting middleware enforcement under specific conditions. This vulnerability may allow unauthorized access to protected routes, potentially exposing sensitive data or bypassing authentication and authorization mechanisms.

Affected Project:

• Onyx Web Package

References:

• Next.js Advisory
• Exploit & PoC Repository

w/@eyel0g