published 2026-11-03
One crafted HTTP request can fully hijack the Reachy Mini robot, giving an attacker control of the robot itself. Since the robot's camera is watching its surroundings, the attacker can also see what the robot sees.
Source: jfrog.com
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1744 and your operating system.