CVE-2024-41648: Openrobotics Robot Operating System

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_regulated_pure_pursuit_controller.

Affected products

Published 2024-12-06. Last modified 2026-06-17.