CVE-2026-102809 describes an uncontrolled stack allocation vulnerability in PX4 Autopilot through version 1.17.0. The flaw exists in the file2 test command where the write chunk size parameter (-c option) is not properly validated. This allows an attacker with shell access to provide an excessively large size value, triggering a stack overflow that can crash the flight controller software.

Successful exploitation results in a stack overflow leading to a crash of the flight controller. This could disrupt flight operations or cause denial of service. The vulnerability requires attacker shell access and does not involve user interaction or network vector, limiting remote exploitation potential.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict shell access to trusted users only to prevent exploitation. Monitor vendor channels for patches addressing this vulnerability.