Yesterday, after various bogus AI slopped "PoC"s, eventually a functional PoC for the React RCE emerged:
https://github.com/msanft/CVE-2025-55182
We now have a PoC from the reporter of the vulnerability as well:
https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc
#react2shell
Jan Schaumann
npub1z6…wehl4
2025-12-05 15:16:18 UTC
in reply to nevent1q…ud4q
Author Public Key
npub1z6e60xgyfcjq42deezd8695tp5ne08dkxqs7acg40ntmcrr23arsjwehl4Seen on
wss://relay.momostr.pinkPublished at
2025-12-05 15:16:18 UTCEvent JSON
{
"id": "08b1c734cb7267b4c337c954c6f0c71e6765beab0de5868baf3af296765cad92",
"pubkey": "16b3a799044e240aa9b9c89a7d168b0d27979db63021eee1157cd7bc0c6a8f47",
"created_at": 1764947778,
"kind": 1,
"tags": [
[
"p",
"16b3a799044e240aa9b9c89a7d168b0d27979db63021eee1157cd7bc0c6a8f47"
],
[
"t",
"react2shell"
],
[
"e",
"def278101ac7149a11239de06b87235e99926ee752a36f996d75605e37c819ec",
"",
"root",
"16b3a799044e240aa9b9c89a7d168b0d27979db63021eee1157cd7bc0c6a8f47"
],
[
"proxy",
"https://mstdn.social/@jschauma/115667617594558443",
"web"
],
[
"proxy",
"https://mstdn.social/users/jschauma/statuses/115667617594558443",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mstdn.social/users/jschauma/statuses/115667617594558443",
"pink.momostr"
],
[
"-"
]
],
"content": "Yesterday, after various bogus AI slopped \"PoC\"s, eventually a functional PoC for the React RCE emerged:\nhttps://github.com/msanft/CVE-2025-55182\n\nWe now have a PoC from the reporter of the vulnerability as well:\nhttps://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc\n\n#react2shell",
"sig": "84f59d15087e6602509cb49c4ee461f912a91fd8c8105ace81ae87d34d7a39d8486d612b0a2ede8de4aff3a5ce9359c28dabb0ce9142d28c44b92c00389315a0"
}