top of page
Suspicious Activity?
Threat Intelligence
Metro4Shell and the Changing Risk Profile of Development Environments
A critical Remote Code Execution vulnerability has been discovered in the Metro Development Server used in React Native development environments, and recent attack activity has been observed exploiting this flaw to distribute malicious payloads. The vulnerability, tracked as CVE-2025-11953 and referred to as Metro4Shell, originates from an OS Command Injection issue in the /open-url endpoint, which is provided for development convenience. This issue is particularly noteworthy
Siwoo Lee
Feb 182 min read
Subscribe to the PAGO Newsletter
bottom of page