A detailed reproduction of CVE-2026-75604, a path traversal vulnerability in Next.js, has been published. This flaw allows an unauthenticated attacker to read and write files on Windows hosts due to an un-escaped backslash in the incremental cache. In specific versions and application configurations, this can lead to remote code execution. Developers using Next.js on Windows should review their deployments and apply necessary mitigations.