luizhenz/poc-cve-2025-55182Proof-of-concept exploit for CVE-2025-55182, a remote code execution vulnerability in React Server Components affecting React.js and Next.js. Executes arbitrary commands on vulnerable servers.
The Script exploits CVE-2025-55182, an RCE that affects the React Server Components used in React.js and Next.js.
19.0.0
19.1.0 and 19.1.1
19.2.0
Next.js 15.x (all versions prior to fixes)
Next.js 16.0.0 (initial alpha/beta/RC versions built on vulnerable React 19)
git clone https://github.com/LuizHenz/PoC-CVE-2025-55182
cd PoC-CVE-2025-55182
pip install -r requirements
python3 exploit.py -u <url> -c <command>