Black Hat Demo: Simple QR Code Breaks Gemini and Hijacks Unitree Robot
MarcoFigueroa · x · 2026-08-09
At the Black Hat USA security conference, researchers demonstrated an attack technique dubbed Kinetic Prompt Injection.
By using a simple QR code, the researchers successfully executed a prompt injection attack against Google's Gemini model. Due to vulnerabilities in how LLMs process multimodal inputs, the malicious instructions embedded in the image were parsed, causing a Unitree robot powered by the model to exhibit erratic behavior and act like a "rabid attack dog."
This research highlights that as AI agents are integrated into the physical world, prompt injection attacks can transcend digital data exfiltration, resulting in actual physical harm with a real-world blast radius.
More from Embodied
- Rethinking Home Humanoid Robots: What Are We Actually Building? — yongqianme · 2026-08-09
- Why Build a 3-Finger Hand? Tacta Systems Reveals Data-Driven Design — MarwaEldiwiny · 2026-08-09
- Google Launches Gemini Robotics ER 2: Enabling Multi-Robot Collaboration and Real-Time Vision — DynamicWebPaige · 2026-08-09
- Chinese Embodied AI Startup BeingBeyond Focuses on Pure 'Robot Brain' Models — chris_j_paxton · 2026-08-09
- Robotics Revolution Will Drive Historic Productivity, Making Now the Best Time to Join AI — tawnniee · 2026-08-09
- Embodied AI Dilemma: Must Robot Brains and Bodies Be Bound Together? — chris_j_paxton · 2026-08-09