MVM assurance · CISA KEV demonstration

Your app is exploitable; MVM protection is not yet proven

CVE-2025-55182 in react-server-dom-webpack 19.0.0

Non-certifying tier 1

Containment is not proven

Conclusion: EXPLOITABLE_MVM_BENEFIT_NOT_PROVEN. This statement applies only to the exact source revision, artifact, trial, policy, and evidence references recorded below.

Tier 2 was not attempted

The corpus workload and net=false guest are wired, but a certifying admitted-provider attestation root is not yet available.

Reason code: attested_provider_unavailable · Tracking issue: #22

No certifying containment evidence exists for this entry. This page reports a reproduced exploit and the absence of a proven boundary, not a boundary that was tested and held.

Residual risk — remediation is still required

MVM does not make malicious React Flight payloads safe; upgrade every affected RSC package and framework to a currently supported patched release.

Evidence identity

Source revision
cf93d929435fd22b895cfbd00e61c83475651e69
Artifact digest
sha256:0e43ccb85ed834ceba8c9a16bfbef25deef1efd72fbd0013ade6481f38282232
Proof ID
cve-2025-55182-tier1
Trial ID
cve-2025-55182-local
Proof binding
sha256:043e1ba3f25956a0f33b075178693ffbe9c10e656a5b87b422a0f9cc326f49c5
Observation digest
sha256:8cdddc5f40eab8027fea5cd976acda99e6e40e11320cc3b962319cf45dad20be
Intelligence snapshot
sha256:dec51a438c2a24f7c01c2f4e57783a87f4c809702b26e02b410aae2750a4bbe4

Non-certifying trial references

Scope and coverage gap

Supply-chain and build-time containment are not covered by the current HTTP-only comparison harness.

Tested boundary: guest filesystem outside workload root through code execution

Advisory and editorial provenance

KEV added
2025-12-05
Selected on
2026-09-05
Attribution
TinyLabs MVM assurance corpus maintainers
Rationale
CVSS 10, CISA KEV-listed unauthenticated RCE in React Server Components, widely reported as React2Shell.

Reproduce and refresh

See README.md for exact commands. Rebuild on input changes and at least quarterly; retire the active page when corpus status changes.

Machine contract: artifact.json · Verified report: comparison-report.json · Checksums: SHA256SUMS