7.5
High
CVE-2026-45109 Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes
Description
Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 and 16.2.6.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| next.js 16.0 | 16.0.0 → < 16.2.6 | 16.2.6 |
| next.js 15.2 | 15.2.0 → < 15.5.17 | 15.5.17 |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| Red Hat Trusted Artifact Signer | Versions not published | |
| streams for Apache Kafka 2 | Versions not published | |
| streams for Apache Kafka 3 | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 9 | Versions not published | |
| Streams for Apache Kafka 2.9.4 | Versions not published | |
| Red Hat Trusted Artifact Signer 1.4 1783327185 | earliest → < 1783327185 | 1783327185 |
| Red Hat Trusted Artifact Signer 1.3 1783958622 | earliest → < 1783958622 | 1783958622 |
References
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- vercel.com vercel.com
Timeline
- Published
- Last modified
Other CVEs of next.js
The 57 CVEs of next.js →
CVE-2026-94482
Next.js is a React framework for building full-stack web applications
8.2
High
CVE-2026-94484
Next.js is a React framework for building full-stack web applications
6.3
Medium
CVE-2026-94485
Next.js is a React framework for building full-stack web applications
6.3
Medium
CVE-2026-94483
Next.js is a React framework for building full-stack web applications
8.3
High