TI-2026-63787 CVE-2026-96455 · GHSA-8w3q-4cmj-h32j
Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint
Priority MEDIUM 40
The Reachy Mini daemon exposes an HTTP API for managing the robot.
No Pollen Robotics vulnerabilities are listed in CISA KEV.
4 records
The Reachy Mini daemon exposes an HTTP API for managing the robot.
Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen.
Reachy Mini is an SDK for controlling Reachy Mini robots.
The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands.