Next.js patches two critical RCEs; self-hosted apps must upgrade now
Both hit CVSS 9+: an AVIF image-optimization overflow and a Windows-server RCE, with public PoCs and no workaround. Plus a $399 teachable HF robot.
Copy markdown
Two unauthenticated RCEs, both CVSS 9+
The AVIF flaw (GHSA-2xp9-vwfh-vxw4, CVSS 9.5) is a heap overflow in the libheif library behind sharp, triggered when Next.js optimizes an attacker-supplied AVIF image. CVE-2026-75604 (CVSS 9.0) hits Windows-hosted apps that use both the Pages and App Router without Cache Components. Neither requires authentication.
Patch to 15.5.24 or 16.3.3 now
Upgrade the 15.x maintenance line to 15.5.24 and the 16.x active line to 16.3.3 (npm install next@16.3.3). The patched builds disable AVIF optimization outright — AVIF images are served unoptimized — until libheif ships an upstream fix.
No self-host workaround, and PoCs are public
There is no mitigation for affected Windows servers short of upgrading, and proof-of-concept code is already circulating — a Python PoC shipped with the libheif advisory, plus a Windows RCE repo on GitHub. Managed platforms are covered: Vercel and Netlify say hosted apps need no action.
Elsewhere: Hugging Face's $399 Microduck
HF unveiled Microduck, a 10-inch robot with a gripper beak, Lidar and camera that you teach by reinforcement learning. CEO Clem Delangue calls it the first affordable AI robot you train by trial and error; preorders are open, with shipping targeted before Christmas.
Elsewhere: Antigravity renders HTML inline
Google's Antigravity IDE hit 2.11.0 with generative UI: agent-built HTML artifacts now render inline in the chat instead of as a separate preview, tightening the loop when you have an agent build a UI.