Skip to content
OpenAdvisories

Vendor

pollen-robotics

4 known vulnerabilities.

Products

Reachy Mini 3 reachy-mini-os 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-96456

    Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device

    The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands. The check protects the session but not the caller, so an attacker in Bluetooth range can ride along on someone else's successful authentication. The authentic…

    pollen-robotics Reachy Mini
  • Medium 5.3
    CVE-2026-55419

    Reachy Mini: Unrestricted Upload of File with Dangerous Type

    Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the upload_sound method in src/reachy_mini/daemon/app/routers/media.py without authentication, file-e…

    pollen-robotics Reachy Mini reachy-mini PyPI