Skip to content
OpenAdvisories

Product · Unitree Robotics

G1 EDU

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack

    Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials by exploiting an un…

  • High 8.8
    CVE-2026-76639 Public exploit

    Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal

    Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP por…