Fastapi Ai Inference Server
Monthly
Unauthenticated model administration in the EnergizeLab Eilik and EilikO companion robots allows any party who can reach the on-device FastAPI AI inference and profiling service over the network to alter AI model configuration and swap the model loaded at runtime, with no credentials or user interaction required (CWE-306). The supplied CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); an independent re-assessment keeps the same unauthenticated, network-reachable vector but rates confidentiality impact as Low and lands on AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H, reflecting that the exposed functions are configuration/administration rather than data-exfiltration endpoints. The practical constraint is exposure: the service runs on a consumer desktop robot that normally listens only on a local or home network, so an attacker generally needs LAN adjacency or a deliberately port-forwarded/exposed device. No public exploit code and no CISA KEV listing were identified at time of analysis, and no vendor-released patch was identified in the provided data.
Unauthenticated path-traversal file writes in the EnergizeLab Eilik and EilikO AI skill upload endpoint allow any remote attacker who can reach the FastAPI AI inference and profiling service to write arbitrary files on the robot's host system by supplying crafted traversal filenames in an upload request. Because the endpoint enforces neither authentication nor path constraints, exploitation is a straightforward, low-complexity primitive that lets an attacker tamper with the AI skill files the robots execute, degrading or subverting robot behavior and causing high integrity and availability impact (CVSS 3.1 base 9.1, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, CWE-434); confidentiality is assessed as unaffected. The practical limiting factor is network reachability rather than credentials or configuration - these are consumer robots whose service is normally confined to the local network segment, so real-world exposure is materially narrower than the AV:N vector implies, and no public exploit code or confirmed active exploitation was identified at time of analysis (the flaw itself needs no user interaction or non-default toggle once the endpoint is reachable).
Unauthenticated model administration in the EnergizeLab Eilik and EilikO companion robots allows any party who can reach the on-device FastAPI AI inference and profiling service over the network to alter AI model configuration and swap the model loaded at runtime, with no credentials or user interaction required (CWE-306). The supplied CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); an independent re-assessment keeps the same unauthenticated, network-reachable vector but rates confidentiality impact as Low and lands on AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H, reflecting that the exposed functions are configuration/administration rather than data-exfiltration endpoints. The practical constraint is exposure: the service runs on a consumer desktop robot that normally listens only on a local or home network, so an attacker generally needs LAN adjacency or a deliberately port-forwarded/exposed device. No public exploit code and no CISA KEV listing were identified at time of analysis, and no vendor-released patch was identified in the provided data.
Unauthenticated path-traversal file writes in the EnergizeLab Eilik and EilikO AI skill upload endpoint allow any remote attacker who can reach the FastAPI AI inference and profiling service to write arbitrary files on the robot's host system by supplying crafted traversal filenames in an upload request. Because the endpoint enforces neither authentication nor path constraints, exploitation is a straightforward, low-complexity primitive that lets an attacker tamper with the AI skill files the robots execute, degrading or subverting robot behavior and causing high integrity and availability impact (CVSS 3.1 base 9.1, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, CWE-434); confidentiality is assessed as unaffected. The practical limiting factor is network reachability rather than credentials or configuration - these are consumer robots whose service is normally confined to the local network segment, so real-world exposure is materially narrower than the AV:N vector implies, and no public exploit code or confirmed active exploitation was identified at time of analysis (the flaw itself needs no user interaction or non-default toggle once the endpoint is reachable).