Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.3

Next.js dev server can leak project files to other sites

CVE-2026-94486 · published 16 days ago
Summary

Versions of Next.js from 16.0.0 through 16.3.7 run a development server that does not properly block requests from other web pages. A malicious site visited by a developer could read the project's folder path, snippets of source code, route information, and logs. Upgrade to version 16.3.8 or later to stop this behavior.

What to do
  • Update next to version 16.3.8.
  • Update vercel next.js to version 16.3.8 or later.
Affected software
Ecosystem VendorProductAffected versions
– vercel next.js >= 16.0.0, < 16.3.8
npm – next >= 16.0.0, < 16.3.8
Fix: upgrade to 16.3.8
Original advisory text
Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint
Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a developer can reach the endpoint and read the project's disk location, source code snippets from error reports, route inventory, and development logs. Production deployments do not serve this endpoint. This issue is fixed in version 16.3.8.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
2.3 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-346Origin Validation Error
Timeline
Published2 Oct 2026
Updated9 Oct 2026
First seen2 Oct 2026
Sources
CVE-2026-94486 · NVD
CVE-2026-94486 · MITRE
CVE-2026-94486 · OSV
GHSA-39w2-rjm5-chcv · GHSA
GHSA-39w2-rjm5-chcv · OSV
Track software like this
Free during beta