The flaw in PX4 Autopilot's mode switching logic allows an attacker to switch from Auto to Manual while the aircraft remains ARMED. This action bypasses a required throttle threshold safety check, permitting rapid, uncontrolled ascent or flyaway. An attacker could therefore cause loss of control, endangering occupants, property, and potentially leading to crashes.

PX4 Autopilot firmware versions 1.12.x through 1.15.x, used in commercial and recreational drones built by the dronecode community. Systems running these builds are vulnerable.

The CVSS 8.1 score indicates high severity. EPSS <1% shows low predicted exploitation probability, but the flaw is in a core flight control path and can be caused with normal flight mode commands. No listing in CISA KEV means no currently known active exploit, yet an attacker with access to the flight controller's control channel could trigger the issue. The risk remains significant if the relevant firmware is deployed.