Exploit for middleware-auth-bypass

kitploit · 2026-09-03

Description

Next.js middleware authentication bypass PoC for CVE-2025-29927.

Affected Vercel Next.js versions

Vercel Next.js< 12.3.5, 13.5.9, 14.2.25, 15.2.3

All known vulnerabilities by product

CVSS 9.1 for CVE-2025-29927

9.1

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:NONE

EPSS Score

99.2%higher than 99.9% of all CVEs

Updated 2026-08-29

Exploit Details

Modified:2026-09-03 09:07

Last Seen:2026-09-04 03:20

Reporter:KitPloit

Tags

Next.jsauthentication bypassmiddlewareCVE-2025-29927proof of concept

Other exploits for CVE-2025-29927

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

POC-CVE-2025-29927-

2026-09-04 KitPloitKITPLOIT

claude-create-CVE-2025-29927

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

Automated-Next.js-Security-Scanner-for-CVE-2025-29927

2026-09-04 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-VALGRACE-MIDDLEWARE-AUTH-BYPASS
# middleware-auth-bypass

CVE-2025-29927 ~ next.js मिडलवेयर प्रमाणीकरण बाईपास का एक प्रूफ ऑफ कॉन्सेप्ट