CVE-2026-105033
CVE-2026-105033 · EnergizeLab AI Station Default Root Credentials with SSH Enabled
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.
CVSS 8.8 · High · EPSS 0.4%
- Published
- Updated
Affected products and versions
ai station firmware (rk3562)
- Versions
- n/a: Affected
No fix published
Original sources
- https://github.com/xn0tsa/your-secrets-are-safe-with-me
- https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101/
- https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab
- https://nvd.nist.gov/vuln/detail/CVE-2026-105033