{"vulnerability": "CVE-2026-55419", "sightings": [{"uuid": "3dbe9036-e062-4170-be1a-605fc6c6d382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55419", "type": "seen", "source": "https://gist.github.com/alon710/d4e64579bb9348b8491cca97afa7743d", "content": "# CVE-2026-55419: CVE-2026-55419: Unrestricted File Upload in Pollen Robotics Reachy Mini SDK\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55419\n\n## Summary\nAn unrestricted file upload vulnerability exists in the Pollen Robotics Reachy Mini robot daemon prior to version 1.8.2. Unauthenticated remote attackers can upload arbitrary files to the temporary sounds directory over the network, leading to disk pollution and staging for potential secondary local exploits.\n\n## TL;DR\nUnauthenticated arbitrary file upload on the Reachy Mini daemon allows attackers to write files to /tmp/reachy_mini_sounds/ over the network.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-434\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **Exploit Status**: PoC available\n- **Remediation**: Upgrade to v1.8.2\n\n## Affected Systems\n\n- Pollen Robotics Reachy Mini SDK (reachy_mini daemon)\n- **reachy_mini**: < 1.8.2 (Fixed in: `1.8.2`)\n\n## Mitigation\n\n- Restrict the daemon binding address from 0.0.0.0 to 127.0.0.1 if external network access is unnecessary.\n- Implement network firewalls to block port 8000 from public exposure.\n- Upgrade reachy_mini to version 1.8.2 or later.\n\n**Remediation Steps:**\n1. Identify the running reachy_mini daemon version using the CLI.\n2. Update reachy_mini via the official package manager or git pull to version 1.8.2.\n3. Restart the daemon to apply changes.\n4. Verify that the /api/media/sounds/upload route returns 400 when submitting non-audio files.\n\n## References\n\n- [GitHub Security Advisory GHSA-m2pc-3q4q-w6jr](https://github.com/pollen-robotics/reachy_mini/security/advisories/GHSA-m2pc-3q4q-w6jr)\n- [Fix Commit 984c772](https://github.com/pollen-robotics/reachy_mini/commit/984c7723b3ec5da63f4e0a2bcf9f120ceb563e04)\n- [Pull Request #1209](https://github.com/pollen-robotics/reachy_mini/pull/1209)\n- [Release v1.8.2 Tag](https://github.com/pollen-robotics/reachy_mini/releases/tag/v1.8.2)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-55419)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55419) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-26T13:31:41.977440Z"}, {"uuid": "490b6421-c366-4968-bece-4060c507e427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55419", "type": "published-proof-of-concept", "source": "https://github.com/pollen-robotics/reachy_mini/security/advisories/GHSA-m2pc-3q4q-w6jr", "content": "", "creation_timestamp": "2026-08-25T18:35:03.930524Z"}]}