CVE-2026-121690 · Infrastructure
NO FIX YET
The EarthRover Mini+ robot firmware, version 6.2.4_6.2.5_0.614.0, runs every process as root with no privilege separation. Compromising any single service gives an attacker full administrative control of the device.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Any EarthRover Mini+ robot running firmware version 6.2.4_6.2.5_0.614.0, since all of its processes run as root. Teams that operate these robots should look at whether their units run this firmware. Units on other firmware versions are not named in the source.
Not affected if other-firmware-version
Who cares earthrover-mini-plus, frodobots, iot, robotics
6.2.4_6.2.5_0.614.0 (unknown whether the sources give a check command)No fix yet, per the sources.
FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges. All processes run as root and the system lacks privilege separation. The compromise of any single service results in full administrative control of the device.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.