Exploitation of Critical Vulnerability in React Server Components (Updated December 8)

Critical CVSS 10.0-rated remote code execution vulnerability in React Server Components Flight protocol tracked as CVE-2025-55182. The vulnerability affects React Server Components and appears to also involve CVE-2025-66478 related to Next.js. This represents a maximum severity vulnerability in widely-used web development frameworks that could have significant impact across applications using React Server Components.