Evidence · DiggingBeagle record
JFrog: Reachy Mini robot HTTP request and local command hijack
The Reachy Mini robot management interface accepted unauthenticated requests to install software from Hugging Face Spaces, with a permissive browser cross-origin configuration increasing reachability. JFrog demonstrates installation of executable packages under the robot service authority. A robot being network-reachable is a prerequisite; the disclosure does not prove observed attacks against deployed owners. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
The Reachy Mini robot management interface accepted unauthenticated requests to install software from Hugging Face Spaces, with a permissive browser cross-origin configuration increasing reachability. JFrog demonstrates installation of executable packages under the robot service authority. A robot being network-reachable is a prerequisite; the disclosure does not prove observed attacks against deployed owners. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (4)
- supportsReachy Mini BLE authentication state and command paths combined in root execution: JFrog reports a chain to root-level command execution in its tested robot environment. The report is a controlled exploit, not evidence every deployed robot was compromised.
JFrog Reachy Mini investigation: shared BLE auth and command path abuse
- supportsReachy Mini BLE authentication state and command paths combined in root execution: Reachy Mini shared mutable BLE authentication state across sessions and accepted absolute-path command handling, allowing one untrusted interaction to influence another privileged action path.
JFrog Reachy Mini investigation: shared BLE auth and command path abuse
- supportsReachy Mini installed executable robot packages through an unauthenticated HTTP API: JFrog demonstrates installation of executable packages under the robot service authority. A robot being network-reachable is a prerequisite; the disclosure does not prove observed attacks against deployed owners.
JFrog Reachy Mini investigation: package installation API; browser-origin control
- supportsReachy Mini installed executable robot packages through an unauthenticated HTTP API: The Reachy Mini robot management interface accepted unauthenticated requests to install software from Hugging Face Spaces, with a permissive browser cross-origin configuration increasing reachability.
JFrog Reachy Mini investigation: package installation API; browser-origin control