New React vulnerability threatens thousands of websites.

React Server Components has been discovered to have a critical security vulnerability named React2Shell. This vulnerability puts thousands of websites, especially crypto platforms, at risk.

The vulnerability has been designated as CVE-2025-55182. This flaw allows for remote code execution without user authentication and affects React versions from 19.0 to 19.2.0.

Attackers can exploit this vulnerability to disseminate malware and crypto mining software, jeopardize server resources, and potentially interrupt wallet interactions on crypto platforms.