CVE-2026-109097

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

CVE-2026-109097

A vulnerability exists in ROS# (all versions

CVE-2026-109097

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

EUVD-2026-120888

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

PT-2026-141588

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

CVE-2026-109097: Siemens ROS#: A vulnerability has been identified in ROS# (All versions < V2.3.1)

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...