Open Source Robotics Foundation - vulnerabilities (CVEs)

7 CVEs in 2 products, 1 in the last 30 days, newest from 2026-09-28.

Products

CVE-2024-42002 - CVSS 8.6 (high), 2026-09-28: A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool, affecting all ROS 2 distributions…
CVE-2025-3753 - CVSS 7.8 (high), 2025-07-17: A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier.…
CVE-2024-41148 - CVSS 7.8 (high), 2025-07-17: A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic…
CVE-2024-39835 - CVSS 7.8 (high), 2025-07-17: A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic…
CVE-2024-39289 - CVSS 7.8 (high), 2025-07-17: A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and…
CVE-2024-41921 - CVSS 7.8 (high), 2025-07-17: A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic…
CVE-2024-39780 - CVSS 9.8 (critical), 2025-04-02: A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting…