Critical React Native Vulnerability Exploited in the Wild

Back Feeds.Feedburner

Critical React Native Vulnerability Exploited in the Wild

Feeds.Feedburner •Ionut Arghire • February 3, 2026

Share: View original

Albeit mainly considered a theoretical risk, the flaw has been exploited to disable protections and deliver malware.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Exploit React Native Metro Vulnerability to Target Developers Hackers are exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native, affecting developers on Windows, Linux, and macOS. The vulnerability allows unauthenticated attackers to execute arbitrary OS commands on Windows and run arbitrary executables on Linux and macOS with limited control. This poses a significant risk to development environments using React Native. 14 sources 57

Extracted Entities

Attack Types (1)

Tools (1)