1 matches found
CVE-2026-55419: Unrestricted Upload of File with Dangerous Type
Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the uploadsound method in src/reachymini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or...
5.3CVSS5.9AI score0.00476EPSS
SaveExploits0References2
20