This vulnerability arises from the ros2topic command‑line tool of ROS 2. The --filter option accepts a Python expression that is sent straight to eval() without any input sanitisation. Because of this, a user who can invoke the tool locally can inject and run arbitrary Python code on the machine executing ros2topic. The flaw therefore permits local arbitrary code execution, which could be used to compromise the entire ROS 2 node or the underlying host system. The weakness is categorized as misuse of eval, corresponding to CWE‑94 and CWE‑95.

The affected vendors and products are the Open Source Robotics Foundation’s Robot Operating System 2 (ROS 2). All ROS 2 distributions from Crystal Clemmys through to Lyrical Luth and Rolling Ridley are impacted, as the issue resides in the ros2cli client package common to those releases.

The CVSS base score of 8.6 marks this as a high‑severity flaw, and because the EPSS score is not available we treat its exploitation probability as unknown but still potentially significant. The vulnerability is not listed in the CISA KEV catalogue, but its local nature means the attack requires a user who can run the ros2topic command with the dangerous --filter option. An attacker can therefore inject code by passing a crafted string, and the consequence is execution of arbitrary code with the privileges of the user running the command.