CVE-2025-55182

🗓️ 15 Sep 2026 16:54:36Reported by KitPloitType

kitploit🔗 kitploit.com👁 5 Views

Remote code execution in Next.js React Server Components (RSC).

Reporter	Title	Published	Views	Family All 1017
vulnersOsv	@cedarjs/api-server (>=1.0.0-canary.12879, <=1.0.0-canary.12881), @cedarjs/cli (>=1.0.0-canary.12879, <=1.0.0-canary.12881) +10 more potentially affected by CVE-2025-55183 +2 more via react-server-dom-webpack (19.2.2)	12 Dec 202500:03	–	vulnersosv
vulnersOsv	3llm (0.0.1), @3bitmt/3bit-sidebar-dashboard (1.1.4) +304 more potentially affected by CVE-2025-55183 +1 more via next (>=15.1.0, <=15.1.9)	11 Dec 202520:43	–	vulnersosv
vulnersOsv	@c0va23/react-router-dev (7.8.3-alpha.2), @orange-js/vite (>=0.0.0-1ae0b37, <=0.0.0-fff5d2d) +9 more potentially affected by CVE-2025-55183 +1 more via @vitejs/plugin-rsc (>=0.4.11, <=0.5.2)	11 Dec 202520:43	–	vulnersosv
vulnersOsv	@cedarjs/api-server (>=1.0.0-canary.12863, <=1.0.0-canary.12878), @cedarjs/cli (>=1.0.0-canary.12863, <=2.0.3-next.1) +13 more potentially affected by CVE-2025-55183 via react-server-dom-webpack (>=19.2.0-canary-cee7939b-20250625, <=19.2.1)	11 Dec 202522:36	–	vulnersosv
vulnersOsv	@071yoon/log-console-core (0.1.0), @3bitmt/3bit-sidebar-dashboard (1.2.0) +154 more potentially affected by CVE-2025-55183 +1 more via next (>=16.0.0, <=16.0.8)	11 Dec 202522:36	–	vulnersosv
vulnersOsv	@atomos_tech/katerpillar (1.0.0), katalyst-riya-test (>=1.0.0, <=1.0.3) potentially affected by CVE-2025-55183 +2 more via next (15.4.9)	12 Dec 202500:03	–	vulnersosv
vulnersOsv	47th (0.1.0), @0xchain/auth (>=0.0.1, <=1.1.0-beta.7) +193 more potentially affected by CVE-2025-55183 +1 more via next (>=15.5.0, <=15.5.7)	11 Dec 202520:43	–	vulnersosv
vulnersOsv	@accounter/client (>=0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, <=0.0.3-alpha-20241210194047-ed4829d58a27c1aa9634b834f5d56d78ce8c68fd), @admiral.nelson/smart-catalyst (>=1.0.19, <=1.0.24) +253 more potentially affected by CVE-2025-55182 +1 more via next (>=14.3.0-canary.24, <=15.0.4-canary.39)	3 Dec 202516:39	–	vulnersosv
vulnersOsv	@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.0.0-rc-6230622a1a-20240610)	3 Dec 202519:07	–	vulnersosv
vulnersOsv	@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2025-55182 via react-server-dom-webpack (19.0.0-rc-6230622a1a-20240610)	3 Dec 202516:39	–	vulnersosv

Source	Link
github	www.github.com/themehackers/cve-2025-55182/blob/main/VERCEL_RESEARCH.md

15 Sep 2026 16:54Current

7.3High risk

Vulners AI Score7.3

CVSS 3.110

EPSS0.99802

SSVC

Next.js React Server Components Remote code execution Source code disclosure Python scanner