Hackers Actively Exploit React Native Metro Server Flaw to Target Developers in the Wild

Cyberpress • February 4, 2026

Share: View original

Threat actors are actively exploiting a critical remote code execution vulnerability in React Native's Metro development server to deploy ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Exploit React Native Metro Vulnerability to Target Developers Hackers are exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native, affecting developers on Windows, Linux, and macOS. The vulnerability allows unauthenticated attackers to execute arbitrary OS commands on Windows and run arbitrary executables on Linux and macOS with limited control. This poses a significant risk to development environments using React Native. 14 sources 57

Extracted Entities

Platforms (1)

Metro Development Server

Tools (1)