Just days after the React2Shell vulnerability was publicly disclosed, you can now learn to understand, exploit, and defend against CVE-2025-55182 with the
ReactOOPs
challenge.
In this scenario, you’ll analyze how NexusAI handles data in its reactive layer by serializing and deserializing component “chunks.” In addition, you’ll pinpoint where input handling breaks down and how attackers can manipulate reference resolution.
Screenshot 2025-12-08 at 1