Skip to content
OpenAdvisories

Vendor

Unitree

7 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.8

    Unitree UPK files Hard-Coded Key

    Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, s…

  • High 7.3

    Unitree Multiple Robotic Products Command Injection

    Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. By setting a malicious string when configuring the on-board WiFi via a BLE module of an affected robot, then …

  • High 8.2

    Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_…