Nav2 security vulnerabilities

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2, which stems from the inclusion of an unsafe privilege vulnerability. An attacker exploiting this vulnerability could execute arbitrary code against nav2dwbcontroller via a script written...

PT-2024-29478

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version v.humble Description The issue allows an attacker to execute arbitrary code via a crafted script to the nav2 dwb controller. This is due to an Insecure Permissions vulnerability...