CVE-2025-57822

CVSS

—

EPSS

0.025 (84.0th percentile)

CISA KEV

Not listed

Exploitation

No report

Public exploits

None seen

State

Unknown

Coverage

• Vercel (blog + changelog)29 Aug 2025, 13:00

  CVE-2025-57822

  Summary Impact Resolution Workarounds Credit References Next.js Middleware v14.2.32 v15.4.7 Server-Side Request Forgery (SSRF) NextResponse.next() request A vulnerability affectinghas been addressed. It impacted versions prior toand, and involved arisk introduced by misconfigured usage of…

  ↗vercel.com/changelog/cve-2025-57822(opens the publisher's site in a new tab)

What we observed