New React vulnerability threatens thousands of websites.

React Server Components have revealed a critical security vulnerability known as React2Shell. This vulnerability puts thousands of websites, especially crypto platforms, at risk.

The vulnerability is identified as CVE-2025-55182. This flaw allows remote code execution without user authentication and affects React versions from 19.0 to 19.2.0.

By exploiting this vulnerability, attackers can disseminate malware and cryptocurrency mining software, jeopardize server resources, and have the potential to disrupt wallet interactions on cryptocurrency platforms.