Zoox issued a voluntary software recall for 332 robotaxis after identifying that the autonomous driving system caused vehicles to cross into opposing lanes or stop in front of oncoming traffic near intersections. While no collisions were reported, the behavior was identified as a safety risk. The company has since deployed software updates to address the issue.
A Zoox robotaxi reportedly crossed partly into the opposing lane and stopped near oncoming traffic during a right turn on August 26, 2025. Zoox later recalled 332 automated-driving systems after identifying similar lane-crossing behavior; no collision was reported.
Risk classification
- Primary risk domain: 7 AI system safety, failures, & limitations
- Primary risk subdomain: 7.3 Lack of capability or robustness
The robotaxis exhibited a lack of capability and robustness by failing to maintain proper lane positioning and blocking crosswalks during autonomous operation.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The risk was caused by the autonomous driving system making unexpected lane-crossing maneuvers while operating on public roads after deployment.
EU AI Act risk tier
High Risk: The autonomous driving system is deployed in critical transport infrastructure and safety-critical applications on public roads, posing significant implications for public safety.
AI system and alleged parties
- AI system: Zoox automated-driving system (Zoox)
- AI purpose: Autonomous Driving
- Behaviour type: Autonomous
- Alleged developer: Zoox, Automated driving system developers
- Alleged deployer: Zoox, Robotaxi operators, Automated driving system deployers
- Alleged harmed parties: Road users, Drivers
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Negligible. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Negligible, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
People affected
- Occurrences reported: 62
- People reportedly exposed: 332
Potential causes
Management
- Delayed Risk Mitigation: First incident occurred in August but full recall was delayed to December.
Technology
- Flawed Path Planning Software: Software caused wide right turns, crossing into oncoming lanes.
- Suboptimal Intersection Logic: Vehicle stopped in crosswalks to avoid blocking intersections.
- Poor Object Prediction Logic: Prior software versions struggled to predict other road users' movements.
Data Inputs
- Inaccurate Lane Boundary Data: System misjudged center yellow lines and crosswalk boundaries.
- Pedestrian Tracking Failures: Previous issues involved poor tracking of nearby pedestrian data.
Human Factors
- Emulating Unsafe Human Habits: System performed wide turns common for humans but unsafe for AI.
Process and Methods
- Insufficient Edge-Case Testing: Testing failed to prevent lane-crossing and crosswalk-blocking behaviors.
- Inadequate Pre-Release Review: Software was deployed despite failing to meet internal safety standards.
Regulatory Environment
- Regulator Pressure and Inquiry: NHTSA discussions and investigations pushed the voluntary recall.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide clear, factual details about the software recall, the specific driving failures (crossing center lines, stopping in crosswalks), the number of affected vehicles (332), and the number of identified instances (62). There is no ambiguity about the lack of collisions or injuries.
A voluntary software recall of 332 Zoox robotaxis due to lane-crossing anomalies presents negligible national security risk. The incident was unintentional, resulted in no collisions or injuries, and has been resolved via software updates under standard regulatory oversight.
- Overall national security impact: Negligible
- Scope: Single nation
- Primary target: No clear primary
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. The issue has been addressed via deployed software updates, representing no immediate or near-term threat to public safety.
- Autonomy: Full autonomy. The vehicles operate autonomously on public roads, making real-time driving decisions without human intervention.
- Novelty: Established threat. Software glitches and voluntary recalls in autonomous vehicle fleets are established industry occurrences with existing regulatory oversight.
Impact by dimension
- Physical security: Negligible. The software defect caused minor traffic navigation errors with zero reported collisions, injuries, or infrastructure damage, presenting negligible threat to national physical security.
- Information security: Negligible. No intelligence compromise, data theft, or disinformation campaigns associated with this commercial autonomous vehicle software update.
- Sovereignty: Negligible. No impact on state authority, electoral systems, or core government decision-making processes.
- Economic security: Negligible. Standard commercial recall of 332 vehicles does not threaten national economic stability, critical supply chains, or strategic technological advantage.
- Societal stability: Negligible. No mass surveillance, algorithmic oppression, or civil unrest resulted from this localized driving software bug.