New React vulnerability threatens thousands of websites.

React Server Components has discovered a critical security vulnerability known as React2Shell. This vulnerability puts thousands of websites at risk, particularly crypto platforms.

The vulnerability is identified as CVE-2025-55182. This flaw allows remote code execution without user authentication and affects React versions from 19.0 to 19.2.0.

Attackers can exploit this vulnerability to distribute malware and cryptocurrency mining software, jeopardize server resources, and potentially disrupt wallet interactions on crypto platforms.