---
collection: application-platforms
collection_name: Application Platforms
week_start: 2026-08-24
title: Critical Next.js RCE patches land as Vercel opens its agent stack
release_count: 226
generated: 2026-09-23
canonical: https://releases.sh/collections/application-platforms/digest/2026-08-24
---

# Critical Next.js RCE patches land as Vercel opens its agent stack

Next.js shipped emergency patches for two critical unauthenticated remote code execution flaws, Cloudflare's WAF raced out matching detections, and Vercel took its agent connectivity layer and agent builder to general availability.

### Next.js RCE patches, and the WAF rules that raced them

The week's most urgent story was a pair of critical unauthenticated remote code execution vulnerabilities in Next.js: one affecting Windows-hosted servers and one reachable through the Image Optimization API when crafted AVIF files are processed. Vercel patched both branches at once, with [the 16.x line](https://github.com/vercel/next.js/releases/tag/v16.3.3) and [the 15.x line](https://github.com/vercel/next.js/releases/tag/v15.5.24) each receiving the same two advisory fixes — if you run either major version in production, upgrade now rather than waiting for a routine window.

Cloudflare's WAF moved in parallel. An [emergency rules update](https://developers.cloudflare.com/changelog/post/2026-08-26-emergency-waf-release/) extended an existing Next.js RCE rule to identify CVE-2026-75604 across Windows-hosted Pages Router and App Router apps, and added fresh detection for the AVIF Image Optimizer path. The same week brought [four detections promoted from Log to Block](https://developers.cloudflare.com/changelog/post/2026-08-25-waf-release/), including HTTP/2 request smuggling and XSS JavaScript event handler coercion across headers, body, and URI, plus a new generic remote code execution rule in Block mode. Together that's a meaningful tightening of default protections for anyone behind the managed ruleset.

Next.js also continued its v17 groundwork, with [Cache Components arriving in create-next-app](https://github.com/vercel/next.js/releases/tag/v16.4.0-canary.10) and Pages Router deprecating React 18, alongside Turbopack tweaks to CSS module class naming and request-context retention.

### Vercel opens up agent infrastructure

Vercel's bigger product story was [Vercel Connect reaching general availability](https://vercel.com/changelog#vercel-connect-is-now-generally-available), giving agents and apps a supported secure connectivity layer instead of bespoke plumbing. It pairs naturally with [building eve agents straight from the dashboard](https://vercel.com/changelog#build-and-deploy-eve-agents-from-the-vercel-dashboard), which scaffolds agent code, pushes it to your repo, and creates a project wired up with AI Gateway models, web chat or Slack, and MCP connections — a notable shortcut from idea to running agent.

The AI Gateway itself got steadier in production terms: [per-user spending caps](https://vercel.com/changelog#set-per-user-budgets-on-ai-gateway) join the existing team, project, and API key budgets, while [Tencent's Hy4 Preview](https://vercel.com/changelog#hy4-preview-now-available-on-ai-gateway) and [Meta's Muse Image](https://vercel.com/changelog#muse-image-now-available-on-ai-gateway) both became callable with a single key, no provider account required. On the SDK side, the harness layer picked up [an fx adapter](https://vercel.com/changelog#fx-is-now-available-in-the-ai-sdk-harness-layer) that runs through the existing HarnessAgent interface.

Performance monitoring got cheaper for everyone: [Speed Insights introduced a free tier](https://vercel.com/changelog#speed-insights-now-has-a-free-tier) covering real-user data on every plan, with paid capabilities continuing as Speed Insights Plus.

The AI SDK shipped a run of provider work — a new [Z.AI provider for GLM chat completions](https://github.com/vercel/ai/releases/tag/%40ai-sdk/zai%402.0.0) with streaming, reasoning, tools, and multimodal inputs; [Moonshot's predicted output and partial mode support](https://github.com/vercel/ai/releases/tag/%40ai-sdk/moonshotai%402.0.53); [Google safety-block metadata surfaced as content-filter results](https://github.com/vercel/ai/releases/tag/%40ai-sdk/google%404.0.55); and [stricter tool-choice enforcement in generateText](https://github.com/vercel/ai/releases/tag/ai%406.0.272), which now rejects responses that violate a required tool selection and exposes the content for recovery.

### GLM-5.3 lands across Workers AI

Cloudflare's model catalog absorbed Z.ai's latest in a hurry. [GLM-5.3, the flagship agentic coding model](https://developers.cloudflare.com/changelog/post/2026-08-28-glm-5.3-workers-ai/), arrived at GLM-5.2 pricing while roughly doubling long-horizon benchmark scores, and [GLM-5.3 Flash](https://developers.cloudflare.com/changelog/post/2026-08-26-glm-5.3-flash-workers-ai/) followed as the first natively multimodal entry in the GLM-5 series, beating its predecessor at a lower price. Both are reachable by binding, REST API, OpenAI-compatible endpoint, or AI Gateway.

AI Search wasted no time adopting them, adding [GLM-5.3 Flash for text generation](https://developers.cloudflare.com/changelog/post/2026-08-30-glm-5.3-flash/) with its million-token context window and [six more Workers AI models](https://developers.cloudflare.com/changelog/post/2026-08-26-new-workers-ai-models/) including DeepSeek V4 Flash and Pro, GPT-OSS 120b and 20b, Qwen3.8-27b, and Kimi K2.7 Code — all without a separate provider key.

### Load balancing, local dev, and platform housekeeping

Cloudflare Load Balancing gained [pool sets](https://developers.cloudflare.com/changelog/post/2026-08-31-pool-sets/), letting a single load balancer apply different candidate pools, steering policies, weights, and fallbacks per data center, country, or region — geographic matching that previously took multiple load balancers. Elsewhere on the edge, [Durable Objects raised their concurrent Dynamic Worker ceiling to ten](https://developers.cloudflare.com/changelog/post/2026-08-28-durable-objects-dynamic-workers-limit/), and APO [resumed caching crawler and bot HTML requests](https://developers.cloudflare.com/changelog/post/2026-08-27-accept-header-caching/) after an Accept-header regression, so any Transform Rule workaround you added can go.

The Workers toolchain had a busy, mostly structural week: [shared local storage across Miniflare instances](https://github.com/cloudflare/workers-sdk/releases/tag/miniflare%405.20260825.0-alpha), [email inspection and local Images binding support](https://github.com/cloudflare/workers-sdk/releases/tag/miniflare%405.20260828.0-alpha), [PR metadata attached to preview deployments](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/deploy-helpers%400.9.0), [per-workflow default retention in wrangler](https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.126.0), and [Vitest support for Workerd's new module registry](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/vitest-plugin%401.1.0). Several config packages converged on a `worker` field name and input/output schema conventions ([config v0.9.0](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/config%400.9.0), [Config 0.8.0](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/config%400.8.0), [build-output-utils](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/build-output-utils%400.2.0)), and the runtime [fixed node:fs cp symlink handling](https://github.com/cloudflare/workerd/releases/tag/v1.20260826.1).

Smaller but worth noting: [app-scoped API tokens for Flagship](https://developers.cloudflare.com/changelog/post/2026-08-26-app-scoped-tokens/) and [scannable cfast_ service token secrets](https://developers.cloudflare.com/changelog/post/2026-08-26-service-token-secret-format/) tighten credential hygiene, [Log Explorer gained permanent dataset deletion](https://developers.cloudflare.com/changelog/post/2026-08-26-dataset-deletion/) with protection on by default, and the [Azure Functions Sentinel connector's retirement date](https://developers.cloudflare.com/changelog/post/2026-08-26-sentinel-functions-connector-deprecation/) is now firm — enterprise users should migrate before September 14. Railway's CLI [reworked its MCP proxy command](https://github.com/railwayapp/cli/releases/tag/v5.44.0) and [added a threads TUI](https://github.com/railwayapp/cli/releases/tag/v5.45.0), Railpack [moved pnpm provisioning to Mise](https://github.com/railwayapp/railpack/releases/tag/v0.38.0) with devEngines taking precedence, and Turborepo [streamed dry-run JSON output](https://github.com/vercel/turborepo/releases/tag/v2.10.13-canary.1) while merging same-prefix globs into single directory walks.

## Releases covered

### Cloudflare

- [Cloudflare WAF blocks Next.js RCE CVE-2026-75604](https://developers.cloudflare.com/changelog/post/2026-08-26-emergency-waf-release/)
- [Cloudflare WAF moves four detections to Block and adds RCE rule](https://developers.cloudflare.com/changelog/post/2026-08-25-waf-release/)
- [Workers AI adds GLM-5.3, Z.ai's flagship agentic coding model](https://developers.cloudflare.com/changelog/post/2026-08-28-glm-5.3-workers-ai/)
- [Workers AI adds Z.ai GLM-5.3 Flash, first natively multimodal GLM-5 model](https://developers.cloudflare.com/changelog/post/2026-08-26-glm-5.3-flash-workers-ai/)
- [Cloudflare Developer Platform AI Search adds GLM-5.3 Flash support](https://developers.cloudflare.com/changelog/post/2026-08-30-glm-5.3-flash/)
- [Cloudflare AI Search adds six Workers AI text generation models](https://developers.cloudflare.com/changelog/post/2026-08-26-new-workers-ai-models/)
- [Cloudflare Load Balancing adds pool sets for location-specific traffic steering](https://developers.cloudflare.com/changelog/post/2026-08-31-pool-sets/)
- [Cloudflare Durable Objects now support up to ten concurrent Dynamic Workers](https://developers.cloudflare.com/changelog/post/2026-08-28-durable-objects-dynamic-workers-limit/)
- [Cloudflare APO caches crawler and bot traffic again after Accept-header regression](https://developers.cloudflare.com/changelog/post/2026-08-27-accept-header-caching/)
- [Workers Miniflare alpha adds shared local storage across dev instances](https://github.com/cloudflare/workers-sdk/releases/tag/miniflare%405.20260825.0-alpha)
- [Workers SDK miniflare alpha adds email inspection, local Images binding support](https://github.com/cloudflare/workers-sdk/releases/tag/miniflare%405.20260828.0-alpha)
- [Workers deploy-helpers 0.9.0 adds pull request metadata to preview deployments](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/deploy-helpers%400.9.0)
- [Workers wrangler 4.126.0 adds per-workflow default retention](https://github.com/cloudflare/workers-sdk/releases/tag/wrangler%404.126.0)
- [Workers Vitest plugin v1.1.0 supports new module registry and TypeScript config](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/vitest-plugin%401.1.0)
- [Workers config v0.9.0 renames Worker target fields to `worker`](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/config%400.9.0)
- [Workers Config 0.8.0 renames schema exports and consolidates dev binding config](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/config%400.8.0)
- [Workers SDK build-output-utils 0.2.0 records build mode and renames config accessors](https://github.com/cloudflare/workers-sdk/releases/tag/%40cloudflare/build-output-utils%400.2.0)
- [Cloudflare Workers v1.20260826.1 fixes node:fs cp symlink handling and adds ioContext.createObject](https://github.com/cloudflare/workerd/releases/tag/v1.20260826.1)
- [Cloudflare Flagship adds app-scoped API tokens for per-app access](https://developers.cloudflare.com/changelog/post/2026-08-26-app-scoped-tokens/)
- [Cloudflare Access service tokens adopt scannable cfast_ secret format](https://developers.cloudflare.com/changelog/post/2026-08-26-service-token-secret-format/)
- [Cloudflare Log Explorer now supports permanent dataset deletion](https://developers.cloudflare.com/changelog/post/2026-08-26-dataset-deletion/)
- [Cloudflare deprecates Azure Functions-based Microsoft Sentinel connector](https://developers.cloudflare.com/changelog/post/2026-08-26-sentinel-functions-connector-deprecation/)

### Railway

- [Railway CLI v5.44.0 reworks MCP proxy command](https://github.com/railwayapp/cli/releases/tag/v5.44.0)
- [Railway CLI v5.45.0 adds threads TUI and project MCP import](https://github.com/railwayapp/cli/releases/tag/v5.45.0)
- [Railpack v0.38.0 switches pnpm to Mise, devEngines now beat engines](https://github.com/railwayapp/railpack/releases/tag/v0.38.0)

### Vercel

- [Next.js v16.3.3 patches two critical unauthenticated RCE vulnerabilities](https://github.com/vercel/next.js/releases/tag/v16.3.3)
- [Next.js v15.5.24 patches two critical unauthenticated RCE vulnerabilities](https://github.com/vercel/next.js/releases/tag/v15.5.24)
- [Next.js v16.4.0-canary.10 launches Cache Components and deprecates React 18](https://github.com/vercel/next.js/releases/tag/v16.4.0-canary.10)
- [Vercel Connect GA brings secure connectivity for AI agents](https://vercel.com/changelog#vercel-connect-is-now-generally-available)
- [Vercel dashboard now lets you build and deploy eve agents](https://vercel.com/changelog#build-and-deploy-eve-agents-from-the-vercel-dashboard)
- [Vercel AI Gateway budgets add per-user spending caps](https://vercel.com/changelog#set-per-user-budgets-on-ai-gateway)
- [Vercel AI Gateway adds Hy4 Preview with one-key access](https://vercel.com/changelog#hy4-preview-now-available-on-ai-gateway)
- [Vercel AI Gateway adds Muse Image by Meta support](https://vercel.com/changelog#muse-image-now-available-on-ai-gateway)
- [Vercel's AI SDK harness layer now supports fx via @ai-sdk/harness-fx](https://vercel.com/changelog#fx-is-now-available-in-the-ai-sdk-harness-layer)
- [Vercel Speed Insights now has a free tier](https://vercel.com/changelog#speed-insights-now-has-a-free-tier)
- [AI SDK adds Z.AI provider with GLM chat completions](https://github.com/vercel/ai/releases/tag/%40ai-sdk/zai%402.0.0)
- [Moonshot AI provider adds predicted output and partial mode support](https://github.com/vercel/ai/releases/tag/%40ai-sdk/moonshotai%402.0.53)
- [AI SDK Google provider 4.0.55 surfaces safety block metadata](https://github.com/vercel/ai/releases/tag/%40ai-sdk/google%404.0.55)
- [AI SDK 6.0.272 rejects invalid tool-choice responses in generateText](https://github.com/vercel/ai/releases/tag/ai%406.0.272)
- [Turborepo v2.10.13-canary.1 streams dry-run JSON and merges globs](https://github.com/vercel/turborepo/releases/tag/v2.10.13-canary.1)