Dec 42025 Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution Critical RSC flaws in React and Next.js enable unauthenticated remote code execution; users should update to patched versions now.