NEXT · CVE-2026-94485 · Package
FIX → 16.3.8 +1
In Next.js App Router apps built with webpack, metadata image routes such as opengraph-image and twitter-image ignore the dynamicParams setting. An attacker can request image URLs for dynamic segments that the app meant to exclude from generateStaticParams, disclosing information those routes were meant to hide.
first public Sep 30, 2026 · 3 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Applications using the Next.js App Router with metadata image routes (opengraph-image, twitter-image) built with webpack. Apps that do not use dynamicParams restrictions on those routes, or that do not use the App Router, are less exposed.
Not affected if default-config, static-export
Who cares next.js, self-hosted, vercel
npm ls next and compare it against the affected range.opengraph-image or twitter-image files under App Router app/ directories that rely on dynamicParams = false or on a restricted .Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read the project's disk location, source code snippets from error reports, route inventory, and development logs. Production deployments do not serve this endpoint. This issue is fixed in version 16.3.8.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
generateStaticParams()Upgrade to 16.3.8 +1
next 16.3.8 for affected versions >= 16.0.0, < 16.3.816.3.?, which is unclear and should not be relied on alone.GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.