[Bug]: Remote Code Execution via CVE-2025-55182-66478

### File Name https://github.com/GoogleCloudPlatform/generative-ai/blob/main/gemini/autocal/frontend/package.json ### What happened? Hi, Summary The repository https://github.com/GoogleCloudPlatform/generative-ai is vulnerable to CVE-2025-55182 (React2Shell), a critical unauthenticated Remote Code Execution vulnerability. The application uses Next.js 15.4.7 with React 19.0.0 and the App Router enabled, which automatically exposes vulnerable React Server Function endpoints. Successful exploitation allows an attacker to execute arbitrary commands on the server without any authentication. Affected Asset >File: https://github.com/GoogleCloudPlatform/generative-ai/blob/main/gemini/autocal/frontend/package.json Vulnerability Description CVE-2025-55182 is a deserialization vulnerability in the React Server Components (RSC) "Flight" protocol. When a Next.js application uses the App Router, it automatically exposes React Server Function endpoints. These endpoints accept multipart HTTP requests and pass them to the RSC Flight deserializer. The deserializer unsafely processes user-supplied input, allowing an attacker to inject a crafted payload that pollutes object prototypes and triggers arbitrary JavaScript execution on the server. No authentication is required. The attack works against any default Next.js 15.x / 16.x application with the App Router enabled. Remediation >Update next >Update react >Redeploy after upgrading References https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components https://nextjs.org/blog/CVE-2025-66478 https://jfrog.com/blog/2025-55182-and-2025-66478-react2shell-all-you-need-to-know/ https://unit42.paloaltonetworks.com/cve-2025-55182-react-and-cve-2025-66478-next/ https://github.com/cybertechajju/R2C-CVE-2025-55182-66478/blob/main/exploits/scanner_advanced.sh ## Impact During local testing, the following was confirmed via RCE: Current OS username and UID Hostname of the server In a production environment this could lead to full server compromise, data exfiltration, credential theft, lateral movement, and ransomware deployment. ### Relevant log output ```shell ``` ### Code of Conduct - [x] I agree to follow this project's Code of Conduct