This flaw is particularly dangerous when the ImageResponse runs on the default Node.js runtime, as the processed malicious markup can trigger further vulnerabilities in downstream library dependencies, leading to remote code execution (RCE). Next.js 16.3.6 and Satori 0.33.5 include the necessary fixes to properly escape user-provided content. While no public exploits have been reported, the vulnerability affects any application that dynamically generates Open Graph or social preview images based on user input.

Impact

Successful exploitation allows an unauthenticated remote attacker to achieve code execution on the server hosting the Next.js application. Given that ImageResponse is frequently used for dynamic social media preview generation, high-traffic applications are at significant risk of compromise. The vulnerability has a CVSS score of 9.5, reflecting its potential for full system compromise.

Recommendation

Prioritize the following actions to mitigate the risk posed by CVE-2026-94545:

• Upgrade all Next.js deployments running affected versions (16.2.0 through 16.3.5) to Next.js 16.3.6 immediately.
• If the application uses the Satori library directly, update the dependency to version 0.33.5 or later.
• Audit all route handlers and opengraph-image files to identify instances where user-supplied input (e.g., from query parameters or headers) is passed into ImageResponse components.
• Implement strict input validation and sanitization for any user-controlled values intended for use in image generation as a temporary defense-in-depth measure.