CVE-2025-41108

Name of the Vulnerable Software and Affected Versions Ghost Robotics Vision 60 version 0.27.2

Description The communication protocol in the software could allow an attacker to send commands to the robot, impersonating the control station and gaining unauthorized full control. The lack of encryption and authentication in the communication protocol allows an attacker to capture and replicate legitimate traffic, sending any valid command to the robot via Wi-Fi or 4G/LTE connections. The protocol is based on MAVLink, a widely documented protocol, which may increase the likelihood of attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.