Unitree Go2 Robot Dog Chat Module Had 9.4-CVSS Remote Command Injection Bug

AIFlow_ML · x · 2026-10-27

Unitree Go2's AI voice/chat module contained a critical remote command-injection vulnerability rated 9.4 CVSS, granting a root shell. Fixed in firmware 1.1.11.5, it's the third serious Go2 flaw in about a year. Owners are urged to update.

Related event: Unitree Go2 Robot Dog Hit by Third Critical Flaw in a Year(4 posts)→

Original post →

More from Embodied

Embodied channel →