VULNpocalypse
MediumVulnerabilityMonitoring

Reachy Mini robot: JFrog reports five CVEs enabling unauthenticated takeover

JFrog reports five CVEs in the Reachy Mini robot daemon that it says allow takeover over the network, so keep the robot off untrusted networks.

Published
Exploitation
No, JFrog describes a research demonstration, and the source reports no exploitation in the wild

What happened

JFrog Security Research reports that it found five CVEs in the Reachy Mini, an open-source AI robot from Pollen Robotics and Hugging Face (JFrog). JFrog published the findings on 2026-11-03.

The robot runs on a Raspberry Pi and ships with its own Wi-Fi network, according to JFrog. JFrog says the robot runs a Python daemon on a Raspberry Pi Compute Module 4. The daemon exposes a FastAPI HTTP server that the SDK and the companion dashboard use. JFrog says the daemon also controls the servo motors, streams camera and audio, and hosts apps pulled from Hugging Face Spaces.

JFrog reports that an attacker on the same reachable network could take control of the affected daemon without credentials, pairing or a password, using a few HTTP requests. JFrog says that by chaining the five CVEs it showed an attacker could:

  • execute attacker code
  • escalate to persistent root through the robot’s passwordless sudo
  • gain control of the device

JFrog says admin access to the robot could mean control of its motors, camera and microphone.

The following details are not confirmed in the available source text:

  • the CVE identifiers
  • the affected and fixed versions
  • whether Pollen Robotics or Hugging Face has released patches or commented

The source does not report any exploitation outside JFrog’s research. There is no independent coverage in the sources.

Am I affected?

  • Product: JFrog names the Reachy Mini robot from Pollen Robotics and Hugging Face (JFrog).
  • Affected versions: not confirmed.
  • Fixed versions: not confirmed.
  • Precondition: JFrog says the attacker must be on a network that can reach the robot’s daemon.

What to do now

  1. Find out whether any Reachy Mini units are connected to your home, lab or office networks.
  2. Limit which devices can reach the robot on the network until vendor fixes are confirmed. This is a general precaution, not a step given in the source.
  3. Watch for the CVE identifiers and a fixed release from Pollen Robotics, Hugging Face or JFrog, and update when one is available. The available source text does not name these yet.

Sources