---
id: CVE-2026-53605
title: >-
  Reachy Mini ISO for Wireless contains the necessary files to build a custom
  Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen
summary: >-
  Reachy Mini ISO for Wireless contains the necessary files to build a custom
  Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior
  to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly
  broad su…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-250
  - CWE-269
vendor: pollen-robotics
product: reachy-mini-os
affected:
  - reachy-mini-os < 0.2.4
published: '2026-09-30'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T19:57:08.043'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53605'
references:
  - url: >-
      https://github.com/pollen-robotics/reachy-mini-os/commit/cee4076f36bd95a2a6b894a56a48c7e971e75445
    label: security-advisories@github.com
  - url: 'https://github.com/pollen-robotics/reachy-mini-os/releases/tag/v0.2.4'
    label: security-advisories@github.com
  - url: >-
      https://github.com/pollen-robotics/reachy-mini-os/security/advisories/GHSA-7rhg-9v48-x3h2
    label: security-advisories@github.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-30T18:17:24.572Z'
---

## Overview

Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wireless robot, using pi-gen. Prior to version 0.2.4, the Reachy Mini Wireless OS image shipped with an overly broad sudoers entry granting the pollen daemon user (uid 1000) passwordless sudo access to /usr/bin/systemctl with no subcommand or argument restriction. This is a local privilege escalation (LPE). Any process running as pollen can obtain full root (uid 0) on the device in three commands, with no additional vulnerability required and no user interaction. This issue has been patched in version 0.2.4.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.