Pollen Robotics

Products

ProductCVEsExploitedLatest
Reachy Mini3–Sep 23, 2026
reachy-mini-os1–Sep 30, 2026

Exploited and recent CVEs

  • CVE-2026-53605 High 7.8 Reachy Mini Wireless: Local Privilege Escalation via Unrestricted sudo systemctl Grant 0.1%
  • CVE-2026-96456 Medium 6.3 Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device 0.2%
  • CVE-2026-96455 High 8.8 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint 0.3%
  • CVE-2026-55419 Medium 5.3 Reachy Mini: Unrestricted Upload of File with Dangerous Type 0.5%