EUVD-2026-75872
GHSA-h776-wwp5-f3wc
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ROS topic interfaces lack authentication by default, so PR:N and AV:N are justified for networked deployments; only availability is impacted.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFSMCallback, planFromGlobalTraj in ego_replan_fsm.cpp
AnalysisAI
Denial-of-service in EGO-Planner-v2, ZJU-FAST-Lab's open-source drone trajectory replanning framework, allows unauthenticated remote attackers to crash the planning process by triggering uncontrolled resource consumption in three FSM callback functions. All repository commits up to 5c99a95880401e2599638d567abc0e240396cb42 are affected, with no vendor-released patch identified at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network-level access to the ROS topic interface consumed by the three affected callbacks in ego_replan_fsm.cpp (checkCollisionCallback, execFSMCallback, planFromGlobalTraj). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) reflects a worst-case scenario where the planning node is reachable from the network without authentication - plausible in cloud-bridged or multi-machine ROS deployments, but not the default for isolated lab setups. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: conduct inventory scan to identify any production or staging deployments of EGO-Planner-v2 and assess network exposure from untrusted sources. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today