CVE-2024-39934: Robotmk

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment.

Affected products

• Robotmk Robotmk: before 2.0.1 (fixed in 2.0.1)

Published 2024-07-04. Last modified 2026-06-17.