Back Securityweek

Critical React Native Vulnerability Exploited in the Wild

Securityweek • February 3, 2026

... security firm JFrog warned in November. Now, VulnCheck mirrors the warning after observing in-the-wild exploitation of the CVE, despite limited ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Exploit React Native Metro Vulnerability to Target Developers Hackers are exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native, affecting developers on Windows, Linux, and macOS. The vulnerability allows unauthenticated attackers to execute arbitrary OS commands on Windows and run arbitrary executables on Linux and macOS with limited control. This poses a significant risk to development environments using React Native. 14 sources 57

Extracted Entities

Tools (1)

React Native