Security researchers have disclosed two vulnerability chains affecting the Unitree G1 EDU humanoid robot that can grant an attacker root-level control over the machine’s onboard computer, tracked as CVE-2026-76639 and CVE-2026-76640, according to The Hacker News and Security Affairs.
Two Distinct Paths to Root
The first chain is network-adjacent, reaching root through the robot’s chat_go and bashrunner components. The second begins over Bluetooth Low Energy proximity, exploiting the robot’s Wi-Fi provisioning process to reach a buffer overflow that grants root execution on the Locomotion PC — meaning an attacker within wireless range, without any network access, can potentially take full control of the robot. Researcher Kevin Finisterre, writing on the disclosure, noted the financial and operational stakes bluntly: “They also cost a lot! I’d be pissed off if someone hacked into my G1, took control of it, and walked it off my factory/campus.”
No Confirmed Fix Yet
As of the disclosure, no fixed firmware release could be independently verified in Unitree’s public guidance, leaving G1 EDU owners without a confirmed remediation timeline for either vulnerability. The Hacker News reported it had reached out to Unitree to confirm affected product scope and fix status but had not received a response as of publication. Unitree’s product page lists the G1 and G1 EDU as separate models, and researchers have not yet confirmed whether the flaws extend to other robots in Unitree’s lineup.
Part of a Pattern With Consumer-Facing Robotics
The disclosure follows earlier security research into Unitree hardware, including a September 2025 finding that a Bluetooth Low Energy exploit dubbed UniPwn could achieve wormable root-level compromise across multiple Unitree platforms, including its Go2 and B2 quadrupeds and G1 and H1 humanoids, using a single hardcoded key shared across the entire device fleet. Robotics cybersecurity researchers have separately raised concerns about undisclosed telemetry from Unitree devices. For organizations deploying humanoid or quadruped robots in factories, campuses or public-facing roles, the G1 EDU findings underscore that physical robotics platforms now carry the same remote-exploitation risk profile as any other networked, wireless-enabled endpoint.
Leave a Reply