CVE-2026-55394 identifies a vulnerability in Teledyne FLIR Aware2 software versions up to and including 6.9.0.2 where session traffic is transmitted unencrypted over the 802.11 wireless network. This cleartext transmission enables adjacent unauthenticated attackers to capture or manipulate session data exchanged with Teledyne FLIR PackBot robots. The vulnerability is categorized as CWE-319, indicating exposure of sensitive information due to lack of encryption in network communication.

Attackers within wireless range can intercept or alter session traffic between the Aware2 software and PackBot robots, potentially compromising confidentiality and integrity of the communication. This could lead to unauthorized access or control over the robots' sessions. However, the attack requires physical proximity and no privileges or user interaction are needed.

No official patch or fix is currently documented for this vulnerability. Users should consult Teledyne FLIR advisories for updates. Until a fix is available, mitigating risk may involve restricting physical access to the wireless network environment and employing additional network-level encryption or VPNs to protect traffic. Monitor vendor communications for any forthcoming patches or official remediation guidance.