Insecure Permissions vulnerability in ROS2 navigation2 allows arbitrary code execution

CVE-2024-41645

What is CVE-2024-41645?

An insecure permissions vulnerability exists within the Open Robotics Robotic Operating System 2 (ROS2) Navigation2 framework. This flaw allows an attacker to execute arbitrary code through the nav2__amcl component by utilizing specially crafted scripts. Exploitation of this vulnerability can lead to unauthorized access and control over robotic systems relying on incorrect permission configurations, necessitating immediate attention and remediation to ensure operational integrity and security.

References