CVE-2026-109097
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program.