February 6, 2026
4 min ReadCVE-2025-11953 – Metro4Shell RCE in React Native Metro Server
A critical unauthenticated remote code execution (RCE) vulnerability has been identified in the React Native Metro development server, with nearly 3,500 exposed instances currently reachable on the public internet. Tracked.








