EGO-Planner Unsafe Motion Due to Expired Trajectory Handling

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: MITRE

Description

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-71640

Affected Vendors & Products

Vendor	Product	Version / Range
zju-fast-lab	ego-planner	to 5c99a95880401e2599638d567abc0e240396cb42 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in ZJU-FAST-Lab EGO-Planner-v2 software where improper handling of expired trajectory data in the replanning pipeline can lead to unsafe vehicle motion. This means the system may not correctly update or discard old trajectory information, potentially causing erratic or dangerous vehicle behavior during operation.

Impact Analysis

If you use or rely on EGO-Planner-v2 for autonomous vehicle navigation, this vulnerability could result in unpredictable or hazardous vehicle movements. This may lead to accidents, damage to property, or injury to individuals near the vehicle. Systems using this software should be updated immediately to mitigate risks.

Mitigation Strategies

Update EGO-Planner-v2 to the latest commit beyond 5c99a95880401e2599638d567abc0e240396cb42 to address the unsafe vehicle motion issue. Review trajectory data handling in the replanning pipeline to ensure expired data is properly managed.

Hi! I’m here to help you understand CVE-2026-71640. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70