CyberSecBulletin

Pollen Robotics vulnerabilities

We track 2 vulnerabilities in Pollen Robotics products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.

2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score

Latest Pollen Robotics vulnerabilities

  • 7.8 High severity

    reachy-mini-os: Execution with Unnecessary Privileges

    CVE-2026-53605Pollen Robotics

    Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting th

  • 8.8 High severity

    Reachy Mini: Missing Authentication for Critical Functionality

    CVE-2026-96455Pollen Robotics

    The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Depends(get_app_manager), which just han