
Python exploit for CVE-2025-55182 in React Server Components, injecting a shell into Next.js 16.0.6 applications. Includes a vulnerable app for testing.
A simple python script that exploits the vulerability in React Server Components in CVE-2025-55182 by injecting a shell in the application. The script is tested on Next.js version 16.0.6
Clone the repository
git clone https://github.com/ahmedshamsddin/CVE-2025-55182
Run vulnerable app
cd CVE-2025-55182/vulnerable-app
npm install
npm run dev
Run exploit
python exploit.py

Disclaimer: This lab is for educational purposes only