---
id: 6932
title: "React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182"
cve: CVE-2025-55182
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/nextjs-cve-2025-55182-react2shell-deep-dive"
published_at: "2025-12-08T17:18:38Z"
tags: ["rce", "cloud-security", "deserialization", "nextjs", "cve-2025-55182", "react", "in-the-wild"]
phying_url: "https://phying.com/item/6932"
lang: en
---

# React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182

## Summary

Wiz details CVE-2025-55182 exploit mechanics—insecure deserialization in React Server Components—and maps in-the-wild attacks from cryptomining and credential harvesting to Sliver backdoors.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2025-55182
- **Published:** 2025-12-08T17:18:38Z
- **Original:** https://www.wiz.io/blog/nextjs-cve-2025-55182-react2shell-deep-dive
- **Phying News:** https://phying.com/item/6932