CVE-2024-41649

Summary

CVE-2024-41649 is an Insecure Permissions vulnerability affecting Open Robotics Robotic Operating System 2 (ROS2) navigation2 in the v.humble release. An attacker can exploit this vulnerability by crafting a malicious script and executing it through the executor_thread_, resulting in arbitrary code execution. This issue could potentially allow an attacker to gain unauthorized access or take control of the affected system. It is recommended that users of ROS2 navigation2 v.humble upgrade to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.