CVE-2026-53605

Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting the pollen daemon user (uid 1000) passwordless sudo access to /usr/bin/systemctl with no subcommand or argument restriction. This is a local privilege escalation (LPE). Any process running as pollen can obtain full root (uid 0) on the device in three commands, with no additional vulnerability required and no user interaction. This issue has been patched in version 0.2.4.

• CWE-250
• CWE-269

• https://github.com/pollen-robotics/reachy-mini-os/commit/cee4076f36bd95a2a6b894a56a48c7e971e75445
• https://github.com/pollen-robotics/reachy-mini-os/releases/tag/v0.2.4
• https://github.com/pollen-robotics/reachy-mini-os/security/advisories/GHSA-7rhg-9v48-x3h2

Published

Sep 30, 2026

Last Modified

Oct 2, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53599REDAXO is a PHP-based content management system. From 5.18.2…7.5
• CVE-2026-5360A vulnerability has been found in Free5GC 4.2.0. The affecte…3.7
• CVE-2026-53600async-tar is a tar archive reading/writing library for async…6.3
• CVE-2026-53602nebula-mesh is a self-hosted control plane for Slack Nebula …6.9
• CVE-2026-53603nebula-mesh is a self-hosted control plane for Slack Nebula …7.1
• CVE-2026-53604nebula-mesh is a self-hosted control plane for Slack Nebula …7.1
• CVE-2026-53606ApostropheCMS is an open-source Node.js content management s…5.4
• CVE-2026-53607ApostropheCMS is an open-source Node.js content management s…3.7
• CVE-2026-53608ApostropheCMS is an open-source Node.js content management s…8.7
• CVE-2026-53609ApostropheCMS is an open-source Node.js content management s…9.1
• CVE-2026-5361The Envira Gallery Lite plugin for WordPress is vulnerable t…6.4
• CVE-2026-53610GLPI is a free asset and IT management software package. Fro…7.5