---
id: 6933
title: "React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability"
cve: CVE-2025-55182
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182"
published_at: "2025-12-03T15:57:17Z"
tags: ["rce", "threat-intelligence", "vulnerability", "patching", "nextjs", "cve-2025-55182", "react"]
phying_url: "https://phying.com/item/6933"
lang: en
---

# React2Shell (CVE-2025-55182): Everything You Need to Know About the Critical React Vulnerability

## Summary

React2Shell (CVE-2025-55182) is a critical unauthenticated RCE in React Server Components, exploitable in default Next.js deployments. Wiz confirms active exploitation and urges immediate patching.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2025-55182
- **Published:** 2025-12-03T15:57:17Z
- **Original:** https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182
- **Phying News:** https://phying.com/item/6933