Skip to main content
عربي
logo

NCSC-TAD-2512-001

Severity Level: Critical
Vulnerability

Reference No.: NCSC-TAD-2512-001CVSS 0

Critical Vulnerability in React Server Components (RSC)

Threat Type:
N/A
TLP:
CLEAR
CVE:
CVE-2025-55182

Overview

The NCSC becomes aware of a critical vulnerability affecting React Server Components (RSC) that allows for RCE on affected servers. Threat actors can exploit the affected components to gain unauthenticated RCE via insecure deserialization of malicious HTTP requests.

Affected Technologies

  • react-server-dom-webpack
  • react-server-dom-turbopack
  • react-server-dom-parcel

Mitigation and Immediate Actions

  1. 01

    NCSC recommends all entities to identify the affected components in their environments and apply the latest available patches immediately.

  2. 02

    The center urges to report any detected suspicious cyber activities to the Cyber Monitoring Team by calling 88881 or via email at cert@ncsc.gov.bh

References