SOURCE-LINKED INTELLIGENCE

Seeing is Not Believing: Breaking the Physical-to-Digital Trust Boundary in Robotics

arXiv · AI, language, vision and robotics · article · Sep 8, 2026 · UTC

In multi-robot collaboration, task handovers rely on downstream verifiers performing remote attestation, which inspects sensor telemetry to ensure a robot's physical behavior strictly matches its assigned task. But can this telemetry be trusted? We show that it often cannot. In this paper, we uncover a severe vulnerability in Robot Operating System (ROS) 2: by modifying a single environment variable, an adversary can execute a pre-built hook to covertly intercept and inject both telemetry and control signals before they are published. Consequently, adversaries can hijack a robot to perform dan

Read original source ↗ Open in workspace

recordType

paper

region

Global