{
  "schemaVersion": 1,
  "slug": "vision-60-control-channel-safety-gap",
  "status": "published",
  "articleType": "brief",
  "desk": "systems",
  "title": "Vision 60’s new vulnerabilities turn robot security into a control problem",
  "dek": "Three July disclosures for Ghost Robotics’ quadruped expose authentication and communication gaps in its control app; the record shows potential loss of control, not a known field attack or patch.",
  "author": {
    "byline": "Noah Kern, Systems & Safety Desk"
  },
  "dates": {
    "publishedAt": "2026-07-30T09:25:34.872Z",
    "updatedAt": "2026-07-30T09:25:34.872Z"
  },
  "hero": {
    "src": "/images/articles/vision-60-control-channel-safety-gap.png",
    "alt": "A generic quadruped robot and operator tablet sit inside a networked safety boundary",
    "credit": "The Robot Economy / AI-generated editorial illustration (OpenAI image generation)",
    "kind": "generated-illustration",
    "sourceUrl": null,
    "rights": "Original AI-generated editorial illustration commissioned for The Robot Economy; no third-party source image used."
  },
  "seo": {
    "title": "Vision 60 vulnerabilities reach the control channel",
    "description": "New Vision 60 vulnerability records reach movement, sensors, video and operator recovery, turning robot cybersecurity into a physical safety-control question.",
    "keywords": [
      "Ghost Robotics",
      "Vision 60",
      "robot cybersecurity",
      "robot safety",
      "control systems",
      "vulnerability disclosure"
    ]
  },
  "machine": {
    "summary": "Three July disclosures for Ghost Robotics’ Vision 60 quadruped identify authentication, session-control, and communication-integrity gaps in the robot’s mobile control application. The public records describe possible access to video, movement, sensors, and emergency commands from a local network, but do not establish exploitation, injury, or a vendor patch.",
    "keyFacts": [
      "The disclosures affect Vision 60 mobile application APK version 5.5.0.",
      "One record describes missing authentication for the web administration interface and HTTP API.",
      "The documented control surface includes movement, sensors, video, and emergency commands.",
      "Another record describes communication-integrity gaps that can disrupt the legitimate controller.",
      "The records state no known exploitation and no patch was reported at publication."
    ],
    "entities": [
      "Ghost Robotics",
      "Vision 60",
      "Spanish National Cybersecurity Institute",
      "National Vulnerability Database",
      "robot control channel",
      "quadrupedal unmanned ground vehicle"
    ]
  },
  "signal": {
    "eventType": "other",
    "stage": "announcement",
    "topics": [
      "safety-security",
      "software-infrastructure",
      "compute-connectivity",
      "defense-dual-use",
      "deployment-operations"
    ],
    "industries": [
      "cross-industry"
    ],
    "companies": [
      "Ghost Robotics",
      "Spanish National Cybersecurity Institute",
      "National Vulnerability Database"
    ],
    "publicListings": [],
    "regions": [
      "Spain",
      "United States",
      "South Korea"
    ]
  },
  "body": [
    {
      "type": "heading",
      "text": "The disclosure"
    },
    {
      "type": "paragraph",
      "text": "On July 27, the National Vulnerability Database published records for two high-severity vulnerabilities affecting the Vision 60 mobile control application, version 5.5.0, made by Ghost Robotics. The independent Korean outlet The Guru reported the same three-CVE disclosure and said Spain’s National Cybersecurity Institute coordinated the findings. The records describe a quadrupedal unmanned ground vehicle, not a generic server or smartphone app.",
      "evidence": "reported",
      "sourceIds": [
        "s1",
        "s2",
        "s3"
      ]
    },
    {
      "type": "paragraph",
      "text": "The highest-consequence record, CVE-2026-12989, describes missing authentication in the mobile application. An attacker connected to the robot’s internal Wi-Fi network could reach the web administration interface and HTTP application programming interface, with the record describing access to live camera feeds, movement, sensors, and commands including Play, Pause, Stop, and emergency stop.",
      "evidence": "reported",
      "sourceIds": [
        "s1",
        "s3"
      ]
    },
    {
      "type": "heading",
      "text": "The physical consequence is the key delta"
    },
    {
      "type": "paragraph",
      "text": "That changes the ordinary cybersecurity frame. This is not only a question of stolen video or exposed maps; the disclosed interface reaches the commands and sensors that operators use to move, stop, and recover the machine. A separate record, CVE-2026-12991, describes missing cryptographic protection for communications and says a local-network attacker could interfere with the legitimate controller and prevent the operator from regaining control.",
      "evidence": "context",
      "sourceIds": [
        "s1",
        "s2",
        "s3"
      ]
    },
    {
      "type": "paragraph",
      "text": "The exposure maps onto the product’s stated operating model. Ghost Robotics describes Vision 60 as a network-connected quadruped for defense and commercial work, with Wi-Fi and cellular connectivity, mission control, live video, and field inspection or public-safety applications. The security boundary therefore sits inside the operating layer that a buyer depends on for detection, supervision, and recovery.",
      "evidence": "analysis",
      "sourceIds": [
        "s2",
        "s4"
      ]
    },
    {
      "type": "heading",
      "text": "What operators still do not know"
    },
    {
      "type": "paragraph",
      "text": "The evidence is serious but bounded. The records state that exploitation was not known, describe a local-network access condition, and do not document an injury, mission failure, or field compromise. The independent report says no patch had been reported at publication and records the company’s earlier response to a 2025 Vision 60 disclosure that testing had used a developer mode. Whether that response applies to the current APK 5.5.0 findings is unresolved.",
      "evidence": "context",
      "sourceIds": [
        "s1",
        "s2",
        "s3"
      ]
    },
    {
      "type": "paragraph",
      "text": "For integrators, patching is only one control. The next safety review should verify the deployed application and firmware version, isolate the control network, test emergency-stop and manual-recovery behavior, preserve relevant logs, and document what happens when the operator loses the channel. Those are operator controls to verify, not claims that Ghost Robotics has validated a remedy.",
      "evidence": "analysis",
      "sourceIds": [
        "s1",
        "s2",
        "s4"
      ]
    },
    {
      "type": "paragraph",
      "text": "The next measurable checkpoint is a vendor patch or technical response followed by an independent retest. A deployment-specific incident, evidence of exploitation, or a clear demonstration that the affected app is not used in current fielded systems would change the assessment again. For now, the decision delta is narrow but material: robot cybersecurity has reached the movement, sensor, and recovery layer of the safety case, even though no field attack has been established.",
      "evidence": "analysis",
      "sourceIds": [
        "s1",
        "s2",
        "s3"
      ]
    }
  ],
  "sources": [
    {
      "id": "s1",
      "title": "CVE-2026-12989 Detail",
      "publisher": "National Vulnerability Database",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12989",
      "sourceType": "official-record",
      "locator": "Description, CVSS record, affected version, and change history",
      "publishedAt": "2026-07-27T09:16:51Z",
      "accessedAt": "2026-07-30T09:22:17.300Z"
    },
    {
      "id": "s2",
      "title": "CVE-2026-12991 Detail",
      "publisher": "National Vulnerability Database",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12991",
      "sourceType": "official-record",
      "locator": "Description, CVSS record, affected version, and change history",
      "publishedAt": "2026-07-27T09:16:52Z",
      "accessedAt": "2026-07-30T09:22:17.300Z"
    },
    {
      "id": "s3",
      "title": "“Loss of control possible”: Ghost Robotics Vision 60 security vulnerabilities surface again",
      "publisher": "The Guru",
      "url": "https://v.daum.net/v/20260728093656378",
      "sourceType": "independent-reporting",
      "locator": "Sections describing CVE-2026-12989 through CVE-2026-12991 and the vendor’s earlier response",
      "publishedAt": "2026-07-28T09:36:00Z",
      "accessedAt": "2026-07-30T09:22:17.300Z"
    },
    {
      "id": "s4",
      "title": "Vision 60 product documentation",
      "publisher": "Ghost Robotics",
      "url": "https://www.ghostrobotics.io/vision-60",
      "sourceType": "product-documentation",
      "locator": "Current page checked 2026-07-30; Key Features, Real-World Applications, Specifications, and Mission Control sections; no publication date displayed",
      "publishedAt": "2026-07-30T00:00:00Z",
      "accessedAt": "2026-07-30T09:22:17.300Z"
    }
  ],
  "originalValue": {
    "type": "operator-analysis",
    "description": "The brief translates a new vulnerability disclosure into an operator control question: movement, sensor, video, emergency-stop, and manual-recovery functions belong inside the robot safety case, while keeping the local-network precondition and absence of field exploitation explicit."
  },
  "corrections": [],
  "disclosures": {
    "sponsored": false,
    "sponsorName": null,
    "founderProductMention": false
  }
}