UniBLEed: Wormable Bluetooth RCE Gives Root on Any Unitree G1 Humanoid
jedisct1 · x · 2026-08-28
Researcher Olivier Boschko published UniBLEed: an unauthenticated, fully wormable root RCE affecting any Unitree G1 humanoid within Bluetooth range — once one G1 is compromised, it can spread the exploit to the next indefinitely.
The chain crosses Bluetooth, Unitree's cloud, mobile, and firmware: a cloud API that decrypts any G1's AES key from any free account without ownership checks; a BLE characteristic accepting writes without pairing; a heredoc injection hijacking WiFi; a path traversal in the robot's chatbot knowledge base leaking the binary's load address; and a 1050-byte BSS buffer overflow that corrupts the event loop into calling system() as root. Disclosure went from 3 months to 80 minutes reproducible, earning $6,700 in bounties and two CVEs (CVE-2026-76639 / 76640).
Notably, Unitree's security team even sent the researcher a G1 as payment for prior work — virtually unheard of in robotics.
More from Embodied
- China's AgiBot Reportedly Raising $210M at $7B Valuation, IPO May Slip to 2027 — xmercury_one · 2026-10-15
- The Verge: cute AI pet Eiliko uploads your conversations to Chinese servers — The Verge AI · 2026-10-15
- Sipeed MaixStation product page goes live for edge AI dev — xlltt · 2026-10-15
- Lukas Ziegler joins SPRIND Next Frontier Robotics Challenge jury, backs modular thesis for Europe — lukas_m_ziegler · 2026-10-15
- Gothic Church 3D Gaussian Splat Coming to Vision Pro, Hailed as Sharpest Ever — willeastcott · 2026-10-15
- Top-labs survey: 5 of 7 robot self-improvement studies show no cross-task gains, zero confirmed L5 — rohanpaul_ai · 2026-10-15