CVE-2025-41109

CVE-2025-41109 affects Ghost Robotics Vision 60 v0.27.2, stemming from a lack of authentication on its physical RJ45 and USB-C ports. An attacker can gain unauthorized network access by physically connecting a device, such as a WiFi access point, to the robot's internal router. This medium-severity vulnerability (CVSS 4.6) allows an attacker to monitor all robot data due to the default unauthenticated ROS 2 environment, with physical access being the only prerequisite. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.