- A critical vulnerability (CVE-2026-94545, CVSS 9.5) in Next.js versions 16.2.0 through 16.3.5 allows remote code execution via the ImageResponse feature when running on the Node.js runtime.
- Vercel released a fix in version 16.3.6 on September 22; the flaw stems from the underlying Satori library that fails to escape attacker‑controlled values in SVG output.
- Affected applications are those that pass user‑controlled data into SVG content during Open Graph image generation; the Edge runtime is not affected, and no public exploits have been reported as of September 23.
Swati Khandelwal reported on September 23, 2026, that a critical server‑side code execution vulnerability in Next.js affects versions 16.2.0 through 16.3.5 when the ImageResponse feature runs on the Node.js runtime. The flaw, tracked as CVE-2026-94545 with a CVSS score of 9.5, allows attackers to execute arbitrary code by injecting crafted values into the SVG content generated for social preview images, according to Vercel‘s advisory.
Vercel, which develops Next.js, fixed the issue on September 22 in version 16.3.6, and the vulnerability does not affect Next.js 15 or the Edge runtime of ImageResponse. The root cause lies in Satori, Vercel‘s library that converts image layouts into SVG code before generating the final PNG; Satori‘s own advisory confirms that certain values reach SVG output without being properly escaped, potentially leading to code execution when combined with other dependencies.
Vercel provided details and a workaround: keep attacker‑controlled values out of SVG content, attributes, and styles rendered by the Node.js ImageResponse. The only patched version is 16.3.6, and developers using Satori directly should update to version 0.33.5. As of September 23, no public exploit code or attacks have been confirmed, and Vercel did not state whether hosted apps are automatically protected or provide a way to detect previous abuse.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
