CyberSecBulletin

Ghostrobotics vulnerabilities

We track 2 vulnerabilities in Ghostrobotics products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2025.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest Ghostrobotics vulnerabilities

  • 8.8 High severity

    Vision 60: Missing Authentication for Critical Functionality

    CVE-2025-41110Ghost Robotics

    Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker

  • 9.8 Critical severity

    Vision 60: Improper Authentication

    CVE-2025-41108Ghost Robotics

    The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could allow an attacker to send commands to the robot from an external attack station, impersonating the control station (tablet) and gaining unauthorised full control of the robot. The