Open Source Robotics Foundation vulnerabilities
We track 7 vulnerabilities in Open Source Robotics Foundation products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2026.
Latest Open Source Robotics Foundation vulnerabilities
- 8.4 High severity
Robot Operating System 2 (ROS 2): Improper Control of Generation of Code
A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied in
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS top
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied,
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability stems from the use of the eval() function to process unsanitized, user-supplied p
- 9.8 Critical severity
A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam'…
A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is ca