Qlik Data Integration products: PGAdmin Next.js Middleware Authorization Bypass Vulnerability CVE-2025-29927

[Dana_Baldwin]

Is Qlik Replicate affected by CVE-2025-29927? (Next.js Middleware Authorization Bypass Vulnerability (CVE-2025-29927) – Qualys ThreatPROTECT)

Resolution

None of Qlik's Data Integration products (Qlik Replicate, Qlik Compose, Qlik Enterprise Manager, Qlik Catalog) use next.js and are not exposed to CVE-2025-29927.

Review if other programs are installed that are affected and uninstall or upgrade them as required, such as PGAdmin.

Note that while Qlik Replicate uses the PostgreSQL driver when PostgreSQL is used as a source or target endpoint, PGAdmin does not need to be installed on the server. 

Environment

• Qlik Replicate