{"id":"CVE-2026-105032","published":"2026-10-15T21:17:03.753","lastModified":"2026-10-16T20:17:17.703","description":"The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not constrain uploaded file paths. An unauthenticated remote attacker can use path traversal to write arbitrary files, and thereby tamper with AI skill files used by Eilik and EilikO robots.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwes":["CWE-22","CWE-434"],"vendors":[],"products":[],"references":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","tags":[]},{"url":"https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001011111111110011111111110000000000000000000000000000000000000000000000000000001100/","tags":[]},{"url":"https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab","tags":[]}],"exploitRefs":[{"url":"https://github.com/xn0tsa/your-secrets-are-safe-with-me","tags":[]}],"hasPoc":true,"ai":{"summary":"The EnergizeLab Eilik and EilikO AI skill upload endpoint allows unauthenticated path traversal attacks, enabling remote attackers to write arbitrary files to the system. This vulnerability is critical because it can lead to complete compromise of the AI inference services and potentially the underlying robot systems.","exploitability":"Exploitation is straightforward for unauthenticated remote attackers who can craft malicious file uploads with path traversal sequences, requiring no additional authentication or privileges beyond network access to the vulnerable endpoint.","blast_radius":"The impact could be severe across all Eilik and EilikO robots using the vulnerable AI inference services, potentially allowing attackers to modify AI skills, inject malicious code, or disrupt robot operations through compromised inference services.","remediation":"Disable the AI skill upload endpoint immediately or implement mandatory authentication for all file upload operations, as no fixed version is published in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","web","ai"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:49:05.334Z"}}