Reachy Mini vulnerabilities

1 known vulnerability in Reachy Mini from Pollen Robotics. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Reachy Mini: Missing Authentication for Critical Functionality

  CVE-2026-96455Sep 23, 2026Pollen Robotics

  The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Depends(get_app_manager), which just han