Ghost-Route - Ghost Route Detects If A Next JS Site Is Vulnerable To The Corrupt Middleware Bypass Bug (CVE-2025-29927)
A Python script to check Next.js sites for corrupt middleware vulnerability (CVE-2025-29927).
The corrupt middleware vulnerability allows an attacker to bypass authentication and access protected routes by send a custom header x-middleware-subrequest.
Next JS versions affected: - 11.1.4 and up
[!WARNING] This tool is for educational purposes only. Do not use it on websites or systems you do not own or have explicit permission to test. Unauthorized testing may be illegal and unethical.
Installation
Clone the repo
git clone https://github.com/takumade/ghost-route.gitcd ghost-routeCreate and activate virtual environment
python -m venv .venvsource .venv/bin/activateInstall dependencies
pip install -r requirements.txtUsage
python ghost-route.py <url> <path> <show_headers><url>: Base URL of the Next.js site (e.g., https://example.com)<path>: Protected path to test (default: /admin)<show_headers>: Show response headers (default: False)
Example
Basic Example
python ghost-route.py https://example.com /adminShow Response Headers
python ghost-route.py https://example.com /admin TrueLicense
MIT License
Credits
Via: www.kitploit.com
Ghost-Route - Ghost Route Detects If A Next JS Site Is Vulnerable To The Corrupt Middleware Bypass Bug (CVE-2025-29927)
Reviewed by Zion3R
on
8:35
Rating:
Reviewed by Zion3R
on
8:35
Rating:
