Unitree Robots Hit by Wormable Remote Code Execution Flaws

Researchers disclosed two RCE flaws in Unitree Go2 robot dogs (CVE-2026-27509 & CVE-2026-27510) that are wormable: one compromised robot can infect nearby vulnerable units, letting attackers hijack an entire fleet. A separate researcher will soon detail similar flaws in the Unitree G1 humanoid found after roughly 200 hours of work.

2026-08-22 ~ 2026-08-22 · 4 related posts