CVE-2026-100409 | opennextjs OpenNext up to 1.20.1 access control

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in opennextjs OpenNext up to 1.20.1. This impacts an unknown function. The manipulation leads to improper access controls.

This vulnerability is uniquely identified as CVE-2026-100409. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More