Threat intelligence / Vulnerability
CVE-2025-55182
Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with CVE-2025- 55182.
Vulnerability
TypeVulnerability
External ID—
First seen2025-12-05
Last seen2025-12-05
Confidence
—
Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with CVE-2025- 55182.
Labels
CISA KEV context
Vendor / productMeta React Server Components
Added2025-12-05
Due date2025-12-12
1 recorded
Relationships
1 external