# MNDT-2026-0029

## Description
Teledyne FLIR PackBot robots running Aware2 version 6.9.0.2 and earlier, as well as FirstLook robots running Aware2 version 1.7.9 and earlier, contain a Local File Inclusion (LFI) vulnerability. This vulnerability is caused by insufficient validation of user input in a web application endpoint. An attacker can read any file on the system without authentication, significantly raising the risk

## Impact
This vulnerability allows remote, unauthenticated attackers to exfiltrate sensitive information such as credentials and configurations. Exploitation permits complete compromise of the device and can result in remote code execution.

## Exploitability
High: Exploitation can be performed remotely without authentication, making this vulnerability accessible to any attacker with network access to the robot.

## CVE ID
CVE-2026-55393

## Common Weakness Enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

## Details
The vulnerability arises from improper sanitization of user-supplied input that is processed by a web service running on the robot. An attacker with network access can inject crafted inputs to manipulate file paths. This allows the attacker to traverse the directory structure and exfiltrate sensitive configuration and operating system files, which could subsequently be used to escalate privileges and fully compromise the device.

## CVSS
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

## Resolution
* Customers should contact Teledyne at UGS-CHELMSFORD-TEAMS-FSE@Teledyne.com for updated software and remediation instructions.

## Discovery Credits
* Patrick Kiley - Mandiant
* Emily Astranova - Mandiant

## Disclosure Timeline
* 2026-03-31: Initial report to Teledyne
* 2026-06-10: Call with Teledyne leadership to discuss the issues
* 2026-06-30: Call with Teledyne engineering staff to discuss the issues
* 2026-09-30: Updated software available from Teledyne
* 2026-10-01: Mandiant advisory published

## References
* [PackBot 510](https://defense.flir.com/defense-products/packbot-510/)
* [FirstLook 110](https://defense.flir.com/defense-products/firstlook/)