Security Bulletin S25-05

Security Advisory – React2Shell Awareness

This is in reference to the recently disclosed vulnerability CVE-2025-66478, identified  as a duplicate of CVE-2025-55182. The issue affects React Server Components and related frameworks, specifically Next.js, and has been classified as a potential Remote  Code Execution (RCE). The React team published the details of this vulnerability on December 03, 2025 on an official blog post.

We have thoroughly investigated and analyzed this matter. We can confirm that the Saviynt EIC product platform does not utilize the related vulnerable components associated with this exploit. Saviynt is not exposed to the associated risks, and your service remains secure.

Contact Information

Any questions may be directed to security@saviynt.com