EUVD-2026-65627
GHSA-m2pc-3q4q-w6jr
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Daemon network-bound with no auth (AV:N, PR:N, AC:L); write impact limited to one temp directory (I:L); no confidentiality or availability impact in isolation.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Lifecycle Timeline
3DescriptionCVE.org
Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the upload_sound method in src/reachy_mini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or size validation. The daemon binds to 0.0.0.0 by default and uses permissive CORS allow_origins=["*"], allowing an unauthenticated network attacker to upload arbitrary file types that are written to /tmp/reachy_mini_sounds/<original_filename>. Malicious files can compromise stored-data integrity and can serve as a foothold when combined with other vulnerabilities. This issue is fixed in version 1.8.2.
AnalysisAI
Unrestricted file upload in the Reachy Mini daemon (pip/reachy-mini prior to 1.8.2) permits any unauthenticated network-reachable attacker to write arbitrary files to the robot's filesystem at /tmp/reachy_mini_sounds/<filename>. The daemon's /api/media/sounds/upload endpoint applies no authentication, no extension filtering, no content validation, and no size cap, and is bound to 0.0.0.0 with permissive CORS by default, making every network interface the robot touches an attack surface. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required for the file upload step itself: the daemon listens on 0.0.0.0 (all interfaces) by default and applies no authentication to /api/media/sounds/upload, so any host with network reachability to the daemon port can exploit this without credentials or prior access. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 score of 5.3 Medium captures the individual vulnerability's bounded impact accurately but materially understates operational risk when the advisory context is factored in: the vendor explicitly documents this as the first link in a kill chain leading to full root OS access on the robot. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade the reachy-mini pip package to version 1.8.2 or later (vendor-released patch confirmed at https://github.com/pollen-robotics/reachy_mini/releases/tag/v1.8.2 and commit 984c7723b3ec5da63f4e0a2bcf9f120ceb563e04). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique File Upload
View allShare
External POC / Exploit Code
Leaving vuln.today