# CVE-2025-67716: Auth0 Next.js SDK has Improper Validation of Query Parameters

> CVE-2025-67716: Auth0 Next.js SDK has Improper Validation of Query Parameters. CVSS 5.7 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2025-67716
Last updated: 2026-10-14T20:10:00Z

- Published: 2025-12-11 00:21 UTC · Updated: 2026-10-14 20:10 UTC · Assigner: GitHub\_M
- CVSS: 5.7 (CVSS 3.1) · Severity: Medium · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
- EPSS: 0.26%, 18th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-184

## Description

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions 4.9.0 through 4.12.1 contain an input-validation flaw in the returnTo parameter, which could allow attackers to inject unintended OAuth query parameters into the Auth0 authorization request. Successful exploitation may result in tokens being issued with unintended parameters. This issue is fixed in version 4.13.0.

## Affected vendors and products

- auth0: nextjs-auth0

## Tracked companies

- [Auth0](https://rewindex.com/company/auth0.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2025-67716)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2025-67716)
- [https://github.com/auth0/nextjs-auth0/commit/35eb321de3345ccf23e8c0d6f66c9f2f2f57d26c](https://github.com/auth0/nextjs-auth0/commit/35eb321de3345ccf23e8c0d6f66c9f2f2f57d26c)
- [https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-mr6f-h57v-rpj5](https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-mr6f-h57v-rpj5)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2025-67716 · Markdown: https://rewindex.com/cve/CVE-2025-67716.md · JSON: https://rewindex.com/api/v1/cves/CVE-2025-67716 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:10:54.559Z