External risk intelligence

EnergizeLab Eilik Robots Unauthenticated Path Traversal Leads to File Tampering.

CVE advisorySeverity: CRITICAL (CVSS 9.1)

CVE-2026-105032

The vulnerability exists in an AI skill upload endpoint for consumer robotics. While the service is network-accessible and lacks authentication, it is typically deployed within a local home network environment rather than as a public-facing internet service. It is plausibly reachable if the device is incorrectly exposed or used in a specific way, but internet-facing exposure is not a standard design pattern.

Path Traversal

Halo Surface Signal: 3 out of 5 — possibly public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

This vulnerability affects EnergizeLab Eilik and EilikO robots, specifically their AI skill upload functionality. An unauthenticated attacker could potentially alter the robot's AI functions by uploading malicious files, which could impact the intended operation and capabilities of these devices. The main concern is confirming relevance and exposure.

Unauthorized file uploads can change robot AI.
Risk to robot function and potential misuse.
Confirm if Eilik/EilikO robots are in use.

Attack Path

How an attacker could exploit the issue

An attacker can exploit this vulnerability by sending specially crafted requests to the AI skill upload endpoint of EnergizeLab Eilik and EilikO robots. This endpoint, which is accessible over the network without any authentication, is susceptible to path traversal attacks. By manipulating file paths in the uploaded data, an attacker can write arbitrary files to the robot's system, potentially altering AI skill files. This could lead to unauthorized control or disruption of the robot's functions.

Network-accessible endpoint without authentication.
Path traversal to overwrite critical files.
Tampering with robot AI skills.

Live Threat

Current exploitation, exposure, and threat context

An unauthenticated remote attacker could tamper with AI skill files used by Eilik and EilikO robots by writing arbitrary files through a path traversal vulnerability in the upload endpoint. This could affect the behavior and functionality of the robots.

AI skill files.
Path traversal to write arbitrary files.
Tampered robot functionality.

Operational Fix

Recommended remediation, mitigation, and detection steps

This vulnerability in the EnergizeLab Eilik and EilikO AI skill upload endpoint primarily impacts owners of these robots. The first practical step is to identify all Eilik and EilikO robots within your environment, confirm their network exposure, and determine which systems host the AI inference and profiling services. Following this, engage the asset owner to plan remediation based on the identified risk and potential impact.

Identify robot asset owners and network exposure.
Verify AI skill upload endpoint accessibility.
Plan coordinated risk reduction.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What are EnergizeLab Eilik and EilikO robots?

These are consumer robotics devices designed with AI-driven personalities and features. They rely on internal AI inference and profiling services to manage their behavioral skills. The vulnerability specifically involves the mechanism used to upload these custom AI skill files to the robot's onboard system.

What does CVE-2026-105032 mean for my robot?

This CVE represents a path traversal weakness, categorized as CWE-22 and CWE-434. It means the robot's software fails to validate where uploaded files are saved. Consequently, an attacker can bypass intended directories to overwrite or add files on the device, potentially changing how the robot's AI functions or disrupting its normal behavior.

How can an attacker trigger this vulnerability?

An attacker triggers this by sending a specially crafted request to the robot's AI skill upload endpoint. Because the endpoint lacks authentication, no login is required to initiate the process. Merely sending a legitimate file to the intended endpoint does not trigger the bug; it requires malicious input specifically designed to manipulate file paths during the upload.

Is my robot at risk?

Halo Surface Signal indicates the risk is possible but typically confined to local home networks. While the endpoint is network-accessible, these robots are rarely designed as public-facing internet services. You should assess if your specific deployment allows network traffic to reach the device from outside your trusted environment, which would increase the likelihood of unauthorized access.

What should I do if I use Eilik or EilikO robots?

Start by auditing your network to identify where these robots are connected. Determine if they are accessible from untrusted networks or the open internet. Once you have an inventory of your devices, monitor for any official guidance or software updates from EnergizeLab, and consider isolating the robots on a restricted network segment to prevent unauthorized access to the upload endpoint.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.