# msanft/CVE-2025-55182

Explanation and full RCE PoC for CVE-2025-55182

Repository: https://github.com/msanft/CVE-2025-55182
Canonical: https://ross.abutalabs.com/products/cve-2025-55182
Language: Python
License Family: other
Last push: 2025-12-08T13:51:04+00:00

## Health v2 (maintenance only)
Score: 41/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 56, release rhythm 35, longevity 19
- inputs: {"age_days": 272, "days_push": 268, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1431, forks 199 (observed 2026-08-28T04:04:42.990728+00:00)

## What it is
A Python proof-of-concept and technical writeup for CVE-2025-55182, a remote code execution vulnerability in React Server Functions (as used by Next.js) caused by insecure prototype references during Flight Protocol deserialization. It explains the vulnerability mechanics and demonstrates full RCE exploitation.

## Use cases
- reproduce CVE-2025-55182 remote code execution
- test whether a Next.js app is vulnerable to React Server Function RCE
- learn how React Flight Protocol deserialization can be abused
- study prototype chain traversal attacks in server functions
- craft malicious multipart payloads for React Server Functions
- understand thenable-based exploitation gadgets
- security research on React and Next.js deserialization flaws

## When to choose
- you need a working PoC to verify or demonstrate CVE-2025-55182
- you are researching React Server Functions or Flight Protocol security
- you are a defender validating patches against this RCE
- you want a detailed technical explanation of the vulnerability

## When to avoid
- you need a general-purpose security scanner rather than a single-CVE PoC
- you want production-ready tooling or maintained exploit frameworks
- you expect official support or a license (the repo has none)
- your target is not running vulnerable React/Next.js Server Functions

## Facets
- artifact type: learning-resource
- maturity: active
- function: security, penetration-testing, serialization
- domain: security, web-development, developer-tools
- platform: python, cross-platform
- tags: cve-2025-55182, rce, proof-of-concept, react-server-functions, nextjs, prototype-pollution, vulnerability-research, exploit, exploitation

## Member repositories
- msanft/CVE-2025-55182 (main) score 41

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:42.990728+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:37:08.036638+00:00, confidence not recorded.
  - readme: https://github.com/msanft/CVE-2025-55182 (fetched 2026-08-28T04:04:42.990728+00:00, sha 3c06085188fa)
- Data as of 2026-08-30T08:39:29.467469+00:00.