EGO-Planner-v2 Denial of Service via checkCollisionCallback

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: MITRE

Description

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM::checkCollisionCallback()

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-71642

Affected Vendors & Products

Vendor	Product	Version / Range
zju-fast-lab	ego-planner	to 5c99a95880401e2599638d567abc0e240396cb42 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in the EGO-Planner-v2 software from ZJU-FAST-Lab. It exists in the EGOReplanFSM::checkCollisionCallback() function and can be triggered by an attacker to cause the system to stop functioning properly.

Impact Analysis

If you use EGO-Planner-v2, an attacker could exploit this flaw to disrupt operations, causing the software to become unresponsive or crash. This could lead to interruptions in planning tasks, especially in robotics or autonomous systems where EGO-Planner-v2 is used.

Mitigation Strategies

Update EGO-Planner-v2 to the latest commit beyond 5c99a95880401e2599638d567abc0e240396cb42 to address the denial of service issue in EGOReplanFSM::checkCollisionCallback.

Hi! I’m here to help you understand CVE-2026-71642. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70