CVE-2025-2894

Summary

CVE-2025-2894 is a newly discovered vulnerability affecting the Go1 robotic device. This backdoor, hidden in the device's CloudSail remote access service, grants unauthorized users, including the manufacturer, the ability to exercise full remote control over the affected robotic device. Access is achieved through the use of a specific API key, making it a significant security concern for consumers who own this product. The potential consequences of exploitation range from device manipulation to potential data breaches. Users are advised to take precautions, such as updating their firmware and securing their API keys, to minimize risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.