Vulnerabilities

TI-2026-38661 CVE-2026-53605

Reachy Mini Wireless: Local Privilege Escalation via Unrestricted sudo systemctl Grant

LOW 35

Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00126 Published 2026-09-30 Fixed in 0.2.4 CWE-250

TI-2026-63788 CVE-2026-96456 · GHSA-w8hv-46m4-pm2j

LOW 28

The Reachy Mini Bluetooth service asks a connecting device for a PIN before it will accept commands.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth User interaction EPSS 0.00247 Published 2026-09-23 No fix listed CWE-287

TI-2026-63787 CVE-2026-96455 · GHSA-8w3q-4cmj-h32j

MEDIUM 40

The Reachy Mini daemon exposes an HTTP API for managing the robot.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00278 Published 2026-09-23 No fix listed CWE-306

TI-2026-39988 CVE-2026-55419 · GHSA-m2pc-3q4q-w6jr

LOW 31

Reachy Mini is an SDK for controlling Reachy Mini robots.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00476 Published 2026-08-25 Fixed in 1.8.2 CWE-434