As cited
Copy frozen at (site build).
vulnerabilities
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
Security researcher Olivier Laflamme disclosed two separate root remote code execution (RCE) vulnerabilities in the Unitree G1 EDU humanoid robot. CVE-2026-76639 and CVE-2026-76640 enable attackers to reach root privileges through distinct attack paths: one via chat_go and bashrunner components over the network, and another through Bluetooth Low Energy (BLE) that compromises the robot's Locomotion PC.
Why it matters: Organizations and researchers operating Unitree G1 EDU robots face immediate risk of complete system compromise; patches and workarounds should be prioritized to prevent unauthorized control.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
Security researcher Olivier Laflamme disclosed two separate root remote code execution (RCE) vulnerabilities in the Unitree G1 EDU humanoid robot. CVE-2026-76639 and CVE-2026-76640 enable attackers to reach root privileges through distinct attack paths: one via chat_go and bashrunner components over the network, and another through Bluetooth Low Energy (BLE) that compromises the robot's Locomotion PC.
Why it matters: Organizations and researchers operating Unitree G1 EDU robots face immediate risk of complete system compromise; patches and workarounds should be prioritized to prevent unauthorized control.
- Source published
- First seen by Cybersecurity Tracker