Vision 60 Firmware vulnerabilities

2 known vulnerabilities in Vision 60 Firmware from Ghostrobotics. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Vision 60: Missing Authentication for Critical Functionality

  CVE-2025-41110Oct 22, 2025Ghost Robotics

  Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an attacker to connect to the robot's WiFi and view all its data, as it runs on ROS 2 without default authentication. In addition, the attacker

• 9.8 Critical severity

  Vision 60: Improper Authentication

  CVE-2025-41108Oct 22, 2025Ghost Robotics

  The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could allow an attacker to send commands to the robot from an external attack station, impersonating the control station (tablet) and gaining unauthorised full control of the robot. The