CVE-2025-11953 - Vulnerability Details

Related Threat Clusters

• Critical RCE Vulnerability in React Native CLI Affects Millions of Developers

  JFrog researchers identified a critical remote code execution vulnerability (CVE-2025-11953) in the React Native CLI, impacting developers using versions 4.8.0 to 20.0.0-alpha.2. Developers are advised to update to the…

  3 articles · Updated November 5, 2025
• Critical RCE Flaw in React Native CLI Exposes Developers to Attacks

  A critical remote-code execution (RCE) vulnerability has been identified in the @react-native-community/cli package, affecting millions of developers. The flaw allows unauthenticated attackers to execute arbitrary OS…

  1 article · Updated November 6, 2025
• Hackers Exploit React Native Metro Vulnerability to Target Developers

  Hackers are exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native, affecting developers on Windows, Linux, and macOS. The vulnerability allows unauthenticated attackers to execute…

  14 articles · Updated February 3, 2026
• CVE-2025-11953: Remote Code Execution Vulnerability in React Native Metro Server

  A critical unauthenticated remote code execution (RCE) vulnerability, tracked as CVE-2025-11953 and known as Metro4Shell, has been identified in the React Native Metro development server. This vulnerability allows…

  2 articles · Updated February 6, 2026
• Critical RCE Vulnerability in React Native CLI Exposes Developers

  A critical remote code execution (RCE) vulnerability has been identified in the @react-native-community/cli package, affecting millions of developers. The flaw, tracked as CVE-2025-11953, allows unauthenticated…

  3 articles · Updated November 6, 2025
• Ransomware Attack in Pennsylvania Exposes Personal and Medical Data

  The Pennsylvania Attorney General's Office confirmed that a ransomware attack in August 2025, attributed to the INC ransomware group, resulted in the theft of personal information, including names, Social Security…

  43 articles · Updated November 18, 2025
• Critical RCE Vulnerability in React Native CLI Exposes Millions of Developers

  A critical remote code execution (RCE) vulnerability (CVE-2025-11953) has been identified in the React Native CLI, affecting developers using versions 4.8.0 to 20.0.0-alpha.2. This flaw allows unauthenticated attackers…

  6 articles · Updated November 6, 2025
• Critical RCE Flaw in React Native CLI Exposes Development Servers

  A critical remote-code execution (RCE) vulnerability in the @react-native-community/cli allows attackers to execute arbitrary OS commands via the Metro development server. This flaw arises because the server binds to…

  1 article · Updated November 6, 2025
• CISA Alerts on React Native Command Injection Vulnerability Exploited in Attacks

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-11953 to its Known Exploited Vulnerabilities catalog, identifying an OS command injection flaw in the React Native Community CLI that…

  2 articles · Updated February 6, 2026
• Cybersecurity Professionals Indicted for BlackCat Ransomware Attacks

  Three cybersecurity professionals have been indicted for allegedly conducting ransomware attacks using the BlackCat (ALPHV) strain against five U.S. companies between May and November 2023. The accused, Ryan Clifford…

  22 articles · Updated November 10, 2025

Recent Intelligence Reports

• 9th February — Research.Checkpoint · February 9, 2026
• CVE-2025-11953 – Metro4Shell RCE in React Native Metro Server — Indusface · February 6, 2026
• CISA Warns of React Native Community Command Injection Vulnerability Exploited in Attacks — Cybersecuritynews · February 6, 2026
• CVE-2025-11953 (Metro4Shell) in React Native Metro Server Enables RCE — Socradar · February 4, 2026
• Critical vulnerability in React Native development tool actively exploited — Techzine.Eu · February 4, 2026
• Critical React Native Metro dev server bug under attack — Theregister · February 3, 2026
• Critical React Native Metro dev server bug under attack — Theregister · February 3, 2026
• Critical React Native Metro dev server bug under attack as researchers scream into the void — Theregister · February 3, 2026

Related Entities