Yarbo Android/iOS Mobile Application and Cloud Infrastructure

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain hard-coded credentials, gain access to telemetry data, and potentially send operational commands to the robot fleet.

CVEs (2)

Remediations

• Yarbo recommends users update the Yarbo mobile app to 3.17.4 or later. Server-side broker authorization will be enforced automatically upon deployment of the May 2026 update. No user action is required.

Affected Vendors

Affected Products (2)

Affected Sectors

Commercial Facilities