Critical React Vulnerability Poses Risk to Crypto Platforms
- A vulnerability, tracked as CVE-2025-55182 and known as React2Shell, allows remote code execution on affected servers.
- The flaw affects React versions from 19.0 to 19.2.0 and is exploited by both criminal and state-backed groups.
- Attackers have begun deploying Monero mining software within days of the vulnerability’s disclosure on December 3.
- Crypto platforms using React may be at risk of having user wallets compromised through malicious script injections.
The exploitation of this vulnerability can lead to significant losses for users, particularly those engaging in wallet interactions or transaction approvals on compromised sites.
With thousands of websites potentially impacted, including crypto platforms, the urgency for updates is critical to prevent asset theft and resource exploitation.(Source)
