EUVD-2026-76112
GHSA-jh98-9grg-5fp6
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Manifests only within an operational swarm (adjacent), depends on a specific IDLE state transition (AC:H), and impact is availability/safety loss with no confidentiality or integrity effect.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
7DescriptionCVE.org
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE
AnalysisAI
Unsafe UAV swarm trajectory planning in Robotics-STAR-Lab's RACER exploration framework (SYSU STAR Group, commit abcdef1234567890) arises from a missing default case in the finite-state machine: when a drone transitions into the IDLE state, it silently stops publishing swarm trajectories, which can lead peer drones to plan collision-prone paths and physically collide. This is a logic/safety defect in academic research code rather than a memory-corruption or data-exposure flaw. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an operational RACER multi-UAV swarm where at least one drone transitions into the IDLE state during a mission; the fault manifests when that drone reaches IDLE and its FSM falls through the missing default case, ceasing swarm-trajectory publication so peers plan colliding paths. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 9.8 with C:H/I:H/A:H substantially overstates this issue: the described impact is physical safety and availability (unsafe planning, potential collisions), with no plausible confidentiality or integrity component, so the confidentiality/integrity 'High' ratings appear inflated. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version is identified at time of analysis; this is research/academic code without formal release tagging. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running RACER framework (SYSU STAR Group) and assess active UAV swarm deployments. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today