An unauthenticated remote code execution vulnerability in the Reachy Mini daemon allows attackers on the same network to gain full control of the device.

The daemon exposes an unauthenticated HTTP API endpoint, POST /apps/install, which allows any user on the local network to install and execute arbitrary Python packages by specifying a Hugging Face Space. This bypasses all authentication requirements and lacks integrity checks for the installed code.

This vulnerability allows for total compromise of the robotic unit, as the attacker can run arbitrary code with the permissions of the daemon. This could lead to the unauthorized physical manipulation of the robot, data theft, or the use of the device as a pivot point for further lateral movement within the local area network. The CVSS score of 8.8 reflects the high severity of this total impact.

Immediate Action: Update the Reachy Mini firmware to version 1.11.0 or later immediately to address the insecure API implementation.

Proactive Monitoring: Review network access logs for unauthorized traffic targeting the daemon's HTTP API and audit the list of installed applications for unexpected packages.

Compensating Controls: Restrict network access to the Reachy Mini device using VLANs or firewall rules to ensure only trusted administrative segments can communicate with the robot's API.

Public Exploit Available: Unknown

The absence of authentication on a critical management API is a severe security oversight. Organizations must apply the vendor-provided update immediately and ensure the device is isolated from untrusted network segments.