Next.js RCE Vulnerability Behind 4-Day API Key Leak Costing $250

A developer documented a 4-day API key leak on their Kubernetes deployment, where Claude and OpenAI keys were repeatedly stolen even after rotation, costing about $250. The root cause turned out to be an unpatched Next.js RCE vulnerability.

2026-10-14 ~ 2026-10-15 · 2 related posts

• API Keys Leaked for 4 Days, $250 Burned: The Culprit Was an Unpatched Next.js RCE — Ubunta · 2026-10-14
• Leaked Claude and OpenAI keys for 4 days: only keys inside running pods were the ones leaking — Ubunta · 2026-10-15