CVE-2026-71647

Deferred Deferred - Pending Action

EGO-Planner-v2 Denial of Service via Callback Functions

Publication date: 2026-09-10

Last updated on: 2026-09-22

Assigner: MITRE

Description

An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFSMCallback, planFromGlobalTraj in ego_replan_fsm.cpp

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-22

Generated

2026-10-01

AI Q&A

2026-09-11

EPSS Evaluated

2026-09-29

NVD

CVE-2026-71647

EUVD

EUVD-2026-75872

Affected Vendors & Products

Vendor	Product	Version / Range
zju-fast-lab	ego-planner-v2	to 5c99a95880401e2599638d567abc0e240396cb42 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in EGO-Planner-v2 up to a specific commit. It allows an attacker to disrupt the system by exploiting functions like checkCollisionCallback, execFSMCallback, and planFromGlobalTraj in the ego_replan_fsm.cpp file.

Detection Guidance

This vulnerability is specific to the EGO-Planner-v2 software and involves a denial of service via certain functions in ego_replan_fsm.cpp. Detection would require checking for unusual activity in the EGO-Planner-v2 process or examining logs for crashes or hangs related to collision checks or trajectory planning.

Impact Analysis

If exploited, this vulnerability could cause the affected system to become unresponsive or crash, leading to service disruption. This may impact operations relying on EGO-Planner-v2 for planning and execution tasks.

Compliance Impact

This vulnerability is a denial of service issue in EGO-Planner-v2 that could disrupt system availability. It does not directly affect compliance with GDPR, HIPAA, or similar standards as it is not a data breach or privacy violation. However, if the affected system is part of infrastructure handling regulated data, operational disruptions could indirectly impact compliance by failing to meet availability requirements.

Mitigation Strategies

Update EGO-Planner-v2 to the latest version beyond commit 5c99a95880401e2599638d567abc0e240396cb42 to address the denial of service issue in ego_replan_fsm.cpp.

Hi! I’m here to help you understand CVE-2026-71647. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70