CVE-2024-41644

Summary

CVE-2024-41644 is an Insecure Permissions vulnerability affecting Open Robotics Robotic Operating System 2 (ROS2) and its navigation2 component, specifically the dyn_param_handler. An attacker can exploit this vulnerability to execute arbitrary code. This issue arises due to insufficient access controls in the component, enabling unauthorized users to modify critical parameters and potentially execute malicious code. Robotics organizations using ROS2 navigation2 version humble are advised to update to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.