
Description: A flaw in the React Server Flight protocol allows unauthenticated attackers to send specially crafted serialized payloads that exploit prototype pollution, leading to arbitrary code execution on the server.
I also included exploit.py for reference (Python PoC) and an HTB-Friendly version for fellow players.