CVE-2026-71640 Business logic in n/a
Attackers can cause unsafe vehicle motion by exploiting improper handling of expired trajectory data in the replanning pipeline.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-71640?
CVE-2026-71640 is a critical vulnerability in n/a, published on 10 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline
Weakness: CWE-703
Which versions are affected by CVE-2026-71640?
How do I fix CVE-2026-71640?
No fix has been published for CVE-2026-71640 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-71640 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-71640 exists.
Sources
Also known as GHSA-rxvf-3whf-jgwm.