
Functional Python POC to test if servers are vulnerable to CVE-2025-55182
Proof-of-concept scanner for detecting React Server Components (RSC) vulnerability in Next.js applications (CVE-2025-55182).
This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber (https://slcyber.io/research-center/high-fidelity-detection-mechanism-for-rsc-next-js-rce-cve-2025-55182-cve-2025-66478/).
This should function against all servers, as python's requests library persists POST body data across redirects. If issues occur, change the base url endpoint from '/' to something like '/123'.
It looks for messages returning a 500 response which include the string E{"digest and if the conditions are true, will report the server as vulnerable.
Usage: python3 script.py <targets_file>