---
title: "Discussion on \"React2shell Leads to Full Microsoft 365 SharePoint compromise: How One Server Exploit Exposed an Entire Tenant\" | Hashnode"
description: "Discussion on \"React2shell Leads to Full Microsoft 365 SharePoint compromise: How One Server Exploit Exposed an Entire Tenant\". This article covers how React2shell Led to Full Microsoft 365 SharePoint compromise : How One Server Exploit Exposed an Entire Tenant"
url: "https://hashnode.com/posts/react2shell-leads-to-full-microsoft-365-sharepoint-compromise/694ddb535e6c517546855926"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [React2shell Leads to Full Microsoft 365 SharePoint compromise: How One Server Exploit Exposed an Entire Tenant](https://blog.harekrishnarai.me/react2shell-leads-to-full-microsoft-365-sharepoint-compromise?utm_source=hashnode&utm_medium=feed)

This article covers how React2shell Led to Full Microsoft 365 SharePoint compromise : How One Server Exploit Exposed an Entire Tenant

Dec 1, 2025 · 4 min read · blog.harekrishnarai.me  
Read the article

-   [#react2shell](https://hashnode.com/tag/react2shell)
-   [#nextjs](https://hashnode.com/tag/nextjs)
-   [#reactjs](https://hashnode.com/tag/reactjs)
-   [#security](https://hashnode.com/tag/security)
-   [#cve-2025-55182](https://hashnode.com/tag/cve-2025-55182)

## Written by

[Hare Krishna Rai](https://hashnode.com/@harekrishnarai)

@harekrishnarai · India

  
[View profile](https://hashnode.com/@harekrishnarai)

Securing the Future of Software Supply Chains & AI

Specialized in uncovering vulnerabilities within software supply chains and dependency ecosystems. Creator of SCAGoat and other open-source security tools. Speaker at Black Hat, DEF CON, and AppSec conferences with research on malicious package detection, dependency confusion, and CI/CD security.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.