CVE-2025-8748

MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system.

Score

CVSS 3.1 8.8 High

Status

Deferred - 1b7e193f-2525-49a1-b171-84af8827c9eb

Published

2025-08-08

Last modified

2025-11-05

Weaknesses

CWE-78

Affected products

• Mir Fleet (Mobile Industrial Robots)
• Mir Robots (Mobile Industrial Robots)

References

• https://mobile-industrial-robots.com/security-advisories/command-injection
• https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/