CVE-2026-3125

score

<0.1

cvss

6.5

epss

0.5%

published

2026-03-04

kev added

—

first seen

2026-10-21

@opennextjs/cloudflare contains a server-side request forgery caused by path normalization bypass in /cdn-cgi/image/ handler, letting attackers fetch arbitrary remote URLs by bypassing Cloudflare edge interception using backslash substitution, exploit requires HTTP clients that preserve backslashes in paths.