PT-2025-35322 · Vercel · Next.Js

Aaronbrown-Vercel · Published 2025-08-29 · Updated 2025-08-30 · CVE-2025-57822

Positive Technologies · (AI Summary)

CVSS v3.1

6.5

6.5

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions:

Next.js versions prior to 14.2.32

Next.js versions prior to 15.4.7

Description:

Next.js, a React framework for building full-stack web applications, is susceptible to Server-Side Request Forgery (SSRF) in self-hosted applications. This issue occurs when the `next()` function is used without explicitly passing the request object, potentially leading to the incorrect forwarding of user-supplied headers.

Recommendations:

Next.js versions prior to 14.2.32: Upgrade to version 14.2.32 or later.

Next.js versions prior to 15.4.7: Upgrade to version 15.4.7 or later.

Verify correct usage of the `next()` function in custom middleware logic.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-57822

GHSA-4342-X723-CH2F

Affected Products

Next.Js

References · 9

• https://osv.dev/vulnerability/GHSA-4342-x723-ch2f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57822 · Security Note
• https://github.com/vercel/next.js · Note
• https://github.com/vercel/next.js/commit/9c9aaed5bb9338ef31b0517ccf0ab4414f2093d8 · Note
• https://github.com/vercel/next.js/security/advisories/GHSA-4342-x723-ch2f · Note
• https://vercel.com/changelog/cve-2025-57822 · Note
• https://twitter.com/VulmonFeeds/status/1961633310829904071 · Twitter Post
• https://t.me/CVEtracker/31293 · Telegram Post
• https://twitter.com/CVEnew/status/1961547029886410886 · Twitter Post