---
id: "CVE-2026-94485"
page: "https://infrastack.ai/live/CVE-2026-94485"
kind: "vulnerability"
aliases: ["CVE-2026-94485", "GHSA-f87g-xv8r-7p7x"]
title: "Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass"
severity: "medium"
cvss: 6.3
epss: 0.00173
exploited: false
status: "open"
category: "package"
products: [{"name": "next", "fixed": ["16.3.?"], "affected": ">= 16.0.0", "ecosystem": "npm"}, {"name": "next", "fixed": ["16.3.8"], "affected": ">= 16.0.0, < 16.3.8", "ecosystem": "npm"}, {"name": "vercel next.js", "fixed": ["16.3.8"], "affected": ">= 16.0.0, < 16.3.8", "ecosystem": "vendor"}]
ecosystems: ["npm", "vendor"]
tags: ["cwe-346", "next.js", "package", "self-hosted", "vercel"]
not_affected_if: ["default-config", "static-export"]
published_at: "2026-09-30T16:14:44+00:00"
first_seen_at: "2026-11-09T22:53:14+00:00"
updated_at: "2026-11-09T23:10:12+00:00"
sources: [{"source": "ghsa-repo", "url": "https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x", "first_seen_at": "2026-11-09T22:53:14+00:00"}, {"source": "ghsa", "url": "https://github.com/advisories/GHSA-f87g-xv8r-7p7x", "first_seen_at": "2026-11-09T22:57:50+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94485", "first_seen_at": "2026-11-09T23:10:12+00:00"}]
exploit_sources: [{"type": "epss", "score": 0.00173, "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-94485"}]
---

# Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass

Link for people: https://infrastack.ai/live/CVE-2026-94485 (this .md is for agents)

In Next.js App Router apps built with webpack, metadata image routes such as opengraph-image and twitter-image ignore the dynamicParams setting. An attacker can request image URLs for dynamic segments that the app meant to exclude from generateStaticParams, disclosing information those routes were meant to hide.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:next affected >= 16.0.0 fixed 16.3.?
- npm:next affected >= 16.0.0, < 16.3.8 fixed 16.3.8
- vendor:vercel next.js affected >= 16.0.0, < 16.3.8 fixed 16.3.8

## How to check

- Check the Next.js version with `npm ls next` and compare it against the affected range.
- Look for `opengraph-image` or `twitter-image` files under App Router `app/` directories that rely on `dynamicParams = false` or on a restricted `generateStaticParams()`.
- Confirm whether the build uses webpack (the default bundler in the affected versions).

## Fix

- `next` `16.3.8` for affected versions `>= 16.0.0, < 16.3.8`
- Versions in the product data also list a fixed entry of `16.3.?`, which is unclear and should not be relied on alone.

## Timeline

- 2026-11-09T22:53:14+00:00 ghsa-repo https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x
- 2026-11-09T22:57:50+00:00 ghsa https://github.com/advisories/GHSA-f87g-xv8r-7p7x
- 2026-11-09T23:10:12+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-94485

## Documents

- [advisory] Maintainer's advisory: github.com https://github.com/vercel/next.js/security/advisories/GHSA-f87g-xv8r-7p7x
- [advisory] Maintainer's advisory: api.github.com https://api.github.com/repos/vercel/next.js/security-advisories/GHSA-f87g-xv8r-7p7x
- [fix] Patch: github.com https://github.com/vercel/next.js/commit/2d9f50a409312696145b82b3157aadb6b1fef476
- [fix] Release notes: github.com https://github.com/vercel/next.js/releases/tag/v16.3.8

## From the sources

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read the project's disk location, source code snippets from error reports, route inventory, and development logs. Production deployments do not serve this endpoint. This issue is fixed in version 16.3.8.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_