Ghost Robotics vulnerabilities
We track 5 vulnerabilities in Ghost Robotics products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 27, 2026.
Latest Ghost Robotics vulnerabilities
- 8.7 High severity
Vision 60: Channel Accessible by Non-Endpoint
The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot (APK v5.5.0) exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and s
- 7.7 High severity
Vision 60: Improper Access Control
An access control vulnerability in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows multiple simultaneous sessions to run without proper client validation or session integrity checks. An attacker with a modified version of the app can con
- 8.7 High severity
Vision 60: Missing Authentication for Critical Functionality
A lack of authentication in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Du
- 8.8 High severity
Vision 60: Missing Authentication for Critical Functionality
Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker
- 9.8 Critical severity
Vision 60: Improper Authentication
The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could allow an attacker to send commands to the robot from an external attack station, impersonating the control station (tablet) and gaining unauthorised full control of the robot. The