Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-05-13T17:08:22 Next.js: Next.js: Cache poisoning allows incorrect response delivery 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CWE-354

Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments that rely on shared caches with insufficient response partitioning. In affected conditions, collisions in the _rsc cache-busting value can allow an attacker to poison cache entries so users receive the wrong response variant for a given URL. This vulnerability is fixed in 15.5.16 and 16.2.5.

A flaw was found in Next.js. React Server Component responses are vulnerable to cache poisoning in deployments that use shared caches without proper response partitioning. An attacker can exploit collisions in the _rsc cache-busting value to poison cache entries. This allows users to receive incorrect response variants for a given URL, potentially leading to information integrity issues.

Low: This flaw in Next.js affects deployments utilizing shared caches without adequate response partitioning. An attacker could leverage collisions in the `_rsc` cache-busting mechanism to poison cache entries, resulting in users receiving unintended content for a given URL. This issue primarily impacts the integrity of cached responses in specific deployment configurations. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Red Hat Enterprise Linux 10 Fix deferred firefox Red Hat Enterprise Linux 10 Fix deferred thunderbird Red Hat Enterprise Linux 7 Fix deferred firefox Red Hat Enterprise Linux 8 Fix deferred firefox Red Hat Enterprise Linux 8 Fix deferred thunderbird Red Hat Enterprise Linux 9 Fix deferred firefox Red Hat Enterprise Linux 9 Fix deferred thunderbird Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-gaudi-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-rocm-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/disk-image-cuda-rhel9 Red Hat Trusted Artifact Signer Fix deferred rhtas/rekor-search-ui-rhel9 streams for Apache Kafka 2 Fix deferred next streams for Apache Kafka 3 Fix deferred next https://www.cve.org/CVERecord?id=CVE-2026-44582 https://nvd.nist.gov/vuln/detail/CVE-2026-44582 https://github.com/vercel/next.js/security/advisories/GHSA-vfv6-92ff-j949