Skip to content
OpenAdvisories

Vendor

Unitree Robotics

8 known vulnerabilities.

Products

Unitree Go2 4 G1 EDU 2 A1 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-76640

    Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack

    Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials by exploiting an un…

    Unitree Robotics G1 EDU
  • High 8.8
    CVE-2026-76639 Public exploit

    Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal

    Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP por…

    Unitree Robotics G1 EDU
  • High 8.0
    CVE-2026-27509

    Unitree Go2 Missing DDS Authentication Enables Adjacent RCE

    Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager.py. A network-adjacent, unauthenticate…

    Unitree Robotics Unitree Go2
  • High 8.0
    CVE-2023-3103

    Authentication Bypass by Spoofing in Unitree Robotics A1

    Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle (MITM) attack on the robot's camera video stream. In addition, if a MITM attack is carried out, it is possible to consume the robot's re…

    Unitree Robotics A1