Yuvalmo-Jfrog

The Reachy Mini daemon exposes the '/api/media/sounds/upload' endpoint, implemented by the `upload sound()` function, without authentication, file-extension checks, content validation, or size validation. By default, the daemon binds to 0.0.0.0 and uses permissive CORS (Cross-Origin Resource Sharing) settings, allowing an unauthenticated network attacker to upload arbitrary file types to the `/tmp/reachy mini sounds/<original filename>` directory. This can compromise stored-data integrity and serve as a foothold for further attacks, such as gaining root access when combined with other issues like Bluetooth authentication bypass and directory traversal.

The Reachy Mini Wireless OS image contains an overly broad sudoers entry that grants the pollen daemon user (uid 1000) passwordless sudo access to the `/usr/bin/systemctl` endpoint without subcommand or argument restrictions. This allows a local privilege escalation (LPE), where any process running as the pollen user can obtain full root (uid 0) privileges on the device using three commands without requiring user interaction.