---
id: 10361
title: "[CVE-2025-29927] Postmortem on Next.js Middleware bypass"
cve: CVE-2025-29927
source_domain: vercel.com
source_url: "https://vercel.com/blog/postmortem-on-next-js-middleware-bypass"
published_at: "2025-03-25T00:00:00Z"
tags: ["cloud-security", "vulnerability-research", "incident-response", "web-security", "vercel", "auth-bypass"]
phying_url: "https://phying.com/item/10361"
lang: en
---

# [CVE-2025-29927] Postmortem on Next.js Middleware bypass

## Summary

Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.

## Intelligence Metadata

- **Sources:** vercel.com
- **CVE:** CVE-2025-29927
- **Published:** 2025-03-25T00:00:00Z
- **Original:** https://vercel.com/blog/postmortem-on-next-js-middleware-bypass
- **Phying News:** https://phying.com/item/10361