The Reachy Mini daemon contains an /api/media/sounds/upload endpoint that accepts file uploads without authentication, file‑extension checks, content validation, or size limits. This flaw allows an attacker to store arbitrary files on the robot’s file system, potentially overwriting or compromising critical data and providing a foothold for further exploitation. The weakness is consistent with CWE‑434, Unrestricted Upload of File with Dangerous Type.

Vendor pollen‑robotics offers the Reachy Mini SDK. Versions prior to 1.8.2 expose the vulnerable upload endpoint. The issue was addressed in release 1.8.2.

The CVSS score of 5.3 denotes a moderate severity. EPSS is not available and the vulnerability is not listed in the CISA KEV catalog. The daemon binds to 0.0.0.0 and permits any origin via CORS, so an unauthenticated network attacker can reach the upload endpoint from remote addresses. Successful exploitation would let the attacker write malicious files into /tmp/reachy_mini_sounds, which could then be used to compromise data integrity or set up subsequent attacks.