A critical path traversal vulnerability (CVE-2026-75604) in the Next.js FileSystemCache on Windows allows unauthenticated attackers to steal Server Action encryption keys and execute arbitrary commands.
Next.js +3
web-vulnerability
rce
path-traversal
windows
nextjs
1r
2t
1c
updated