A critical backdoor has been discovered in the widely used XZ Utils library, allowing remote code execution on vulnerable systems.