
React2Shell Proof of Concept
Critical Pre-Authentication Remote Code Execution in React Server Components
A complete proof-of-concept demonstrating CVE-2025-55182, a critical vulnerability in [email protected] that allows unauthenticated attackers to execute arbitrary code via prototype chain pollution.
# Clone the repository
git clone https://github.com/whiteov3rflow/CVE-2025-55182-poc
cd CVE-2025-55182-poc
# Exploit the server
python3 exploit.py 'touch /tmp/pwned'
This POC is provided for educational and security research purposes only. Only test against systems you own or have explicit permission to test. Unauthorized access to computer systems is illegal.
Made with 💀 for security research