New React vulnerability threatens thousands of websites.

React Server Components has been found to have a critical security vulnerability known as React2Shell. This vulnerability puts thousands of websites at risk, especially crypto platforms.

The vulnerability is identified as CVE-2025-55182. This flaw allows remote code execution without user authentication and affects React versions from 19.0 to 19.2.0.

Attackers can use this vulnerability to distribute malware and crypto mining software, jeopardize server resources, and potentially disrupt wallet interactions on crypto platforms.