---
id: 6660
title: "CVE-2025-55182 and CVE-2025-66478 (“React2Shell”): All you need to know – UPDATED"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/2025-55182-and-2025-66478-react2shell-all-you-need-to-know/"
published_at: "2025-12-09T14:15:40Z"
tags: ["rce", "vulnerability", "cve", "jfrog", "react2shell", "nextjs", "cve-2025-55182", "cve-2025-66478", "react", "jfrog-com"]
phying_url: "https://phying.com/item/6660"
lang: en
---

# CVE-2025-55182 and CVE-2025-66478 (“React2Shell”): All you need to know – UPDATED

## Summary

JFrog's living advisory on React2Shell (CVE-2025-55182 / CVE-2025-66478): a near-100%-success RCE in React Server Functions and Next.js, now with public exploits, plus follow-on DoS fixes.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2025-12-09T14:15:40Z
- **Original:** https://jfrog.com/blog/2025-55182-and-2025-66478-react2shell-all-you-need-to-know/
- **Phying News:** https://phying.com/item/6660