EnergizeLab Eilik: Unauthenticated path traversal allows arbitrary file write
Summary
The AI skill upload endpoint of the Eilik and EilikO robots, served by the FastAPI AI inference and profiling services, requires no authentication and does not restrict uploaded file paths. An unauthenticated remote attacker can use path traversal to write arbitrary files on the server. This allows tampering with the AI skill files that control the behaviour of Eilik and EilikO robots.
Affected
- EnergizeLab Eilik and EilikO robots and the associated FastAPI AI inference and profiling services
- Affected versions: Unknown.
Fixed in
Unknown.
Workaround
- Keep the robots and their backend services off the public internet.
- Block the AI skill upload endpoint at the network edge.
- Ask EnergizeLab for a fix before re-enabling voice and chat features.
Exploitation
- Not known to be exploited in the wild (CISA SSVC: exploitation none, automatable yes).
- A public proof of concept is reported by the researcher but has not been verified.
- VulDB rates exploitability as easy; the CVE is not listed in KEV.
Our recommendation
- Check whether any of your systems deploy Eilik or EilikO robots, for example in schools, care settings or reception areas.
- Isolate affected robots and backend services from the internet and block the upload endpoint.
- Contact EnergizeLab for an advisory and fixed firmware or backend versions, and monitor for updates.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub repository xn0tsa/your-secrets-are-safe-with-me github.com
- TakeOnMe GCVE reference takeonme.org
- The Verge: Eiliko robot hack www.theverge.com
- VulDB entry 420897 vuldb.com
- OpenCVE CVE-2026-105032 app.opencve.io
- TakeOnMe advisory takeonme.org
- Strix CVE-2026-105032 www.strix.ai
- ThreatInt CVE-2026-105032 cve.threatint.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 06:27.
Original description (NVD)
The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not constrain uploaded file paths. An unauthenticated remote attacker can use path traversal to write arbitrary files, and thereby tamper with AI skill files used by Eilik and EilikO robots.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.