Wormable RCE Vulnerabilities Found in Unitree Robots
matthew_d_green · x · 2026-08-22
Security researchers disclosed two Remote Code Execution vulnerabilities (CVE-2026-27509 & CVE-2026-27510) in Unitree robots. Attackers can gain root access via DDS protocol or mobile app database tampering. The exploit is wormable, meaning one compromised robot could infect nearby vulnerable units, potentially allowing attackers to hijack entire fleets.
Related event: Unitree Robots Hit by Wormable Remote Code Execution Flaws(4 posts)→
More from Embodied
- Volvo and NVIDIA expand partnership to bring safe automated driving to next-gen cars — nvidia · 2026-10-16
- Tevel's robotic system harvests fruit around the clock using computer vision — LexiLove · 2026-10-16
- SHOES: 10 minutes of real-robot RL lets quadrupeds walk in shoes, CoRL 2026 paper — kscottz · 2026-10-16
- Tesla Cybercab robotaxis logged zero crashes in first two weeks of public rides, NHTSA data shows — elonmusk · 2026-10-16
- Robotics LLMs tested on 16 tasks: GPT-6 Astra hits 17.2% success vs Fable's 9.1% — pabbeel · 2026-10-16
- WEDGE paper generates training environments conditioned on navigation agent failures — _akhaliq · 2026-10-16