CVE-2025-8748 — OS command injection in MiR robots and MiR fleet via crafted HTTP requests
MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execut…
Published: 2025-08-08 · CVSS: 8.8 · CVSS 3.1
MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7