8.2

CVE-2025-57822: vercel next.js Server-Side Request Forgery (SSRF)

CVSS: 8.2v3.1HighAnalyzed
AliasesCGA-c2mp-984r-rccmCGA-c7r8-v3v2-h3p3CGA-crm6-3884-733r
Published 29-08-2025Last modified 02-09-2025
Open JSON

Vulnerability summary

CVE-2025-57822 is a high (CVSS 8.2) Server-Side Request Forgery (SSRF) vulnerability in vercel next.js. EPSS estimates a 2.58% chance of exploitation in the next 30 days, higher than 85% of scored vulnerabilities.

Overall risk
33/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.2/10
010
High · v3.1 (NVD)
EPSS score
2.58%
0%100%
Low · +0.09 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 1
CGA-WPVJ-5HJH-P49G

Timeline

  1. 29-08-2025
    PublishedVulnerability first disclosed.
  2. 02-09-2025
    Last modifiedVulnerability information updated.

Description

Next.js is a React framework for building full-stack web applications. Prior to versions 14.2.32 and 15.4.7, when next() was used without explicitly passing the request object, it could lead to SSRF in self-hosted applications that incorrectly forwarded user-supplied headers. This vulnerability has been fixed in Next.js versions 14.2.32 and 15.4.7. All users implementing custom middleware logic in self-hosted environments are strongly encouraged to upgrade and verify correct usage of the next() function.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

2.58%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

+0.09 pp

From 2.50% on 20-09-2026

20-09-202620-10-2026
EPSS score
2.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard3 products
  • jitsucom-jitsu< 2.11.0-r1
  • jitsucom-jitsu-console< 2.11.0-r1
  • jitsucom-jitsu-rotor< 2.11.0-r1
Wolfi3 products
  • jitsucom-jitsu< 2.11.0-r1
  • jitsucom-jitsu-console< 2.11.0-r1
  • jitsucom-jitsu-rotor< 2.11.0-r1
Npm1 product
  • next≥ 0.9.9, < 14.2.32 | ≥ 15.0.0-canary.0, < 15.4.7
Vercel1 product
  • next.js< 15.4.7 | < 14.2.32 | ≥ 15.0.0, < 15.4.7

4 vendors · 8 products

References

6 links