Skip to content
OpenAdvisories

Vendor

pollen-robotics

4 known vulnerabilities.

Products

Reachy Mini 3 reachy-mini-os 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-53605

    Reachy Mini Wireless: Local Privilege Escalation via Unrestricted sudo systemctl Grant

    Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting t…

    pollen-robotics reachy-mini-os
  • High 8.8
    CVE-2026-96455

    Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

    The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Depends(get_app_manager), which just ha…

    pollen-robotics Reachy Mini