CVE-2025-55182-poc

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #claude-code #codex #cli #developer-tools #react #windows

CVE-2025-55182-poc

★ 94 Open GitHub ↗

React2Shell Proof of Concept

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# CVE-2025-55182 Proof of Concept

> **Critical Pre-Authentication Remote Code Execution in React Server Components**

A complete proof-of-concept demonstrating CVE-2025-55182, a critical vulnerability in `react-server-dom-webpack@19.0.0` that allows unauthenticated attackers to execute arbitrary code via prototype chain pollution.

[![Security Research](https://img.shields.io/badge/Security-Research-red.svg)](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55182)
[![Python 3.8+](https://img.shields.io/badge/Python-3.8+-blue.svg)](https://www.python.org/)
[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://raw.githubusercontent.com/whiteov3rflow/CVE-2025-55182-poc/main/LICENSE)

## Quick Start

```bash
# Clone the repository
git clone https://github.com/whiteov3rflow/CVE-2025-55182-poc
cd CVE-2025-55182-poc

# Exploit the server
python3 exploit.py 'touch /tmp/pwned'
```
<img width="1889" height="812" alt="image" src="https://github.com/user-attachments/assets/5b5f39c5-64bf-449c-97dc-ccf451df8ebe" />

## ⚠️ Disclaimer

This POC is provided for educational and security research purposes only. Only test against systems you own or have explicit permission to test. Unauthorized access to computer systems is illegal.
## References

- CVE-2025-55182
- React Security Advisory
- Credits: maple3142, react2shell.com,assetnote

---

**Made with 💀 for security research**

CVE-2025-55182-poc

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README