Segment-Prefetch

Next.js App Router Segment-Prefetch Middleware Bypass (CVE-2026-44575)

CVE-2026-44575 is an authorization bypass in Next.js App Router middleware matching. Vulnerable versions compile middleware matchers for canonical paths and legacy Pages Router data routes, but omit the App Router transport variants used for .rsc and…