Vulnerability · Published Aug 8, 2025 · Assigned by TRO
CVE-2025-8748OS command injection in MiR robots and MiR fleet via crafted HTTP requests
High 8.8
In plain English
A high-severity OS command injection in MiR Fleet from Mobile Industrial Robots. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.3%top 28.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Mobile Industrial Robots | MiR Robots | 0 – before 3.0.0 |
| Mobile Industrial Robots | MiR Fleet | 0 – before 3.0.0 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H