How a Next.js RCE Hijacked Our AWS App Runner Container

From an AWS Trust & Safety alert to a compromised production container: a real-world DevSecOps incident involving Next.js, React Server Components, and AWS networking. The Incident: An Unexpected AWS