PT-2026-34741 · Lerobot · Lerobot
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
LeRobot versions prior to 0.6.0
Description
An unsafe deserialization issue exists in the asynchronous inference pipeline of the policy server and robot client components. The software uses the
pickle.loads() function to deserialize data received over unauthenticated gRPC channels that lack TLS (Transport Layer Security), a protocol used to encrypt communications. An unauthenticated network-reachable attacker can achieve remote code execution by sending a specially crafted pickle payload through the following gRPC calls:SendPolicyInstructionsSendObservationsGetActions
Exploitation of this issue can lead to the compromise of the host machine, theft of sensitive data such as API keys and SSH credentials, lateral movement within the network, denial of service, or the manipulation of physical robot behavior.
Recommendations
Update to version 0.6.0.
As a temporary mitigation, restrict network access to the PolicyServer port to prevent unauthorized external communication.
Exploit
Fix
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lerobot