New React vulnerability threatens thousands of websites.

React Server Components contains a critical security vulnerability identified as React2Shell. This vulnerability puts thousands of websites, particularly crypto platforms, at risk.

The vulnerability is defined as CVE-2025-55182. This flaw allows remote code execution without user authentication and affects React versions from 19.0 to 19.2.0.

Attackers can exploit this vulnerability to distribute malware and crypto mining software, jeopardize server resources, and potentially disrupt wallet interactions on crypto platforms.