{"uuid": "6569ae43-06a3-4556-9b39-12b1a8cae651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66478", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/react2shell_unauth_rce_cve_2025_55182.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Maksim Rogov\", \"Valentin Lobstein \", \"Lachlan Davidson\", \"maple3142\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A critical unauthenticated Remote Code Execution (RCE) vulnerability exists in React Server\\n          Components (RSC) Flight protocol. The vulnerability allows attackers to achieve prototype\\n          pollution during deserialization of RSC payloads by sending specially crafted multipart\\n          requests with \\\"__proto__\\\", \\\"constructor\\\", or \\\"prototype\\\" as module names.\\n\\n          This module supports multiple vulnerable frameworks including Next.js and Waku.\", \"disclosure_date\": \"2025-12-03\", \"fullname\": \"exploit/multi/http/react2shell_unauth_rce_cve_2025_55182\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Unauthenticated RCE in React Server Components (React2Shell)\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"React2Shell\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/react2shell_unauth_rce_cve_2025_55182.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/react2shell_unauth_rce_cve_2025_55182\", \"references\": [\"CVE-2025-55182\", \"EDB-52506\", \"CVE-2025-66478\", \"URL-https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components\", \"URL-https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3\", \"URL-https://www.vulncheck.com/blog/react2shell-beyond-nextjs\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Next.js - Unix Command\", \"Next.js - Windows Command\", \"Waku - Unix Command\", \"Waku - Windows Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:11.013545Z"}