---
id: 209
title: "CVE-2025-55182: What you need to know about React2Shell"
cve: CVE-2025-55182
cvss: 10
severity: critical
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/cve-2025-55182-what-you-need-to-know-about-react2shell/"
published_at: "2025-12-04 15:54"
tags: ["rce", "deserialization", "vulnerability", "nextjs", "cve-2025-55182", "react", "react-server-components"]
phying_url: "https://phying.com/item/209"
lang: en
---

# CVE-2025-55182: What you need to know about React2Shell

## Summary

The React team disclosed CVE-2025-55182, an unauthenticated RCE in React Server Components used by Next.js. Bugcrowd has activated priority triage for related submissions.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **CVE:** CVE-2025-55182
- **CVSS:** 10
- **Published:** 2025-12-04 15:54
- **Original:** https://www.bugcrowd.com/blog/cve-2025-55182-what-you-need-to-know-about-react2shell/
- **Phying News:** https://phying.com/item/209