robot operating system vulnerabilities and fixes

Recent CVEs affecting robot operating system, with upgrade or downgrade steps. 27 tracked.

Also searched as: robotoperatingsystem.

robot operating system has 27 tracked vulnerabilities, 15 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-07-17. Highest priority: CVE-2024-41649 (score 58/100).

• CVE-2025-3753 HIGH 7.8 MITIGATE A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affectin
• CVE-2024-44856 HIGH 7.5 DOWNGRADE Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer de
• CVE-2024-44855 HIGH 7.5 DOWNGRADE Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer de
• CVE-2024-44854 HIGH 7.5 DOWNGRADE Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer de
• CVE-2024-44853 HIGH 7.5 DOWNGRADE Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer de
• CVE-2024-44852 CRITICAL 9.8 DOWNGRADE Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a segmentation vi
• CVE-2024-41921 HIGH 7.8 MITIGATE A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line
• CVE-2024-41650 CRITICAL 9.8 DOWNGRADE Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allow
• CVE-2024-41649 CRITICAL 9.8 DOWNGRADE Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allow
• CVE-2024-41648 CRITICAL 9.8 DOWNGRADE Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allow
• CVE-2024-41647 CRITICAL 9.8 DOWNGRADE Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allow
• CVE-2024-41646 CRITICAL 9.8 DOWNGRADE Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allow
• CVE-2024-41645 CRITICAL 9.8 DOWNGRADE Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allow
• CVE-2024-41644 CRITICAL 9.8 DOWNGRADE Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allow
• CVE-2024-41148 HIGH 7.8 MITIGATE A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line
• CVE-2024-39835 HIGH 7.8 MITIGATE A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-lin
• CVE-2024-39780 HIGH 7.8 MITIGATE A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line
• CVE-2024-39289 HIGH 7.8 MITIGATE A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affect
• CVE-2024-38927 CRITICAL 9.8 DOWNGRADE Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-afte
• CVE-2024-38926 CRITICAL 9.8 DOWNGRADE Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-afte
• CVE-2024-38925 CRITICAL 9.8 DOWNGRADE Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-afte
• CVE-2024-38924 CRITICAL 9.8 DOWNGRADE Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-afte
• CVE-2024-38923 CRITICAL 9.8 DOWNGRADE Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-afte
• CVE-2024-38922 CRITICAL 9.8 DOWNGRADE Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overf
• CVE-2024-38921 CRITICAL 9.8 DOWNGRADE Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-afte
• CVE-2024-30962 HIGH 7.8 DOWNGRADE Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and
• CVE-2024-30961 HIGH 7.8 DOWNGRADE Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble

FAQ

How do I fix robot operating system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is robot operating system being exploited right now?

None of the tracked robot operating system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which robot operating system CVE should I patch first?

CVE-2024-41649 currently ranks highest (58/100): Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allow.

RSS feed for robot operating system · ← Back to latest CVEs