CVE-2025-55182 is a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC) affecting Next.js applications using App Router with Server Actions
The vulnerability exists in the Flight protocol deserialization process, allowing attackers to achieve arbitrary code execution through prototype pollution
Msf:
use multi/http/react2shell_cve_2025_55102
BurpSuite ActiveScan++ детектит React2Shell
🖥 Repo
🖥 Advisory
#cve #poc #nextjs #react
✈️ Whitehat Lab 💬Chat