---
title: "Discussion on \"Next.js: CVE-2025-29927 (TryHackMe)\" | Hashnode"
description: "Discussion on \"Next.js: CVE-2025-29927 (TryHackMe)\". Introduction\nIn January 2025, security researchers Rachid and Yasser Allam uncovered a critical vulnerability in Next.js that sent shockwaves through the web development community. CVE-2025-29927, a middleware authorization bypass flaw, affects one o..."
url: "https://hashnode.com/posts/nextjs-cve-2025-29927-tryhackme/6963f48ac5672dc9c01d37e7"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Next.js: CVE-2025-29927 (TryHackMe)](https://www.sharonjebitok.com/nextjs-cve-2025-29927-tryhackme?utm_source=hashnode&utm_medium=feed)

Introduction In January 2025, security researchers Rachid and Yasser Allam uncovered a critical vulnerability in Next.js that sent shockwaves through the web development community. CVE-2025-29927, a middleware authorization bypass flaw, affects one o...

Jan 11 · 14 min read · sharonjebitok.com  
Updated Feb 17  
Read the article

-   [#cve-2025-29927](https://hashnode.com/tag/cve-2025-29927)
-   [#nextjs](https://hashnode.com/tag/nextjs)
-   [#tryhackme](https://hashnode.com/tag/tryhackme)
-   [#burpsuite](https://hashnode.com/tag/burpsuite)
-   [#websecurity](https://hashnode.com/tag/websecurity)

## Written by

[Jebitok](https://hashnode.com/@w1t3r)

@w1t3r · Kenya

  
[View profile](https://hashnode.com/@w1t3r)

Software Developer \* Cyber security Research \* Open for roles

Software Developer | Learning Cybersecurity | Open for roles \* If you're in the early stages of your career in software development (student or still looking for an entry-level role) and in need of mentorship, you can reach out to me.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.