Hacktron AI audit finds critical flaws in Cloudflare's vibe-coded Next.js replacement vinext: session leakage, cache poisoning, middleware bypass
Researcher Mohan Pedhapati of Hacktron ran an AI-driven audit against vinext, Cloudflare's Next.js reimplementation reportedly built in a week with AI assistance. The scan produced 45 findings, of which 24 were manually validated, including several Critical issues. The most serious bugs allow cross-user session data leakage, shared cache …