Unitree Go2's AI Chat Module Was a Root Shell: Third Serious Bug in a Year
AIFlow_ML · x · 2026-10-27
A deep-dive on the critical remote command-injection bug (CVSS 9.4) in Unitree Go2's AI voice/chat module, which yielded a root shell. The piece aggregates public sources (NVD, VulDB, Unitree SRC, earlier DDS and UniPwn research, no exploit steps), notes it's the third serious Go2 flaw in about a year, points to the fix in firmware 1.1.11.5, and includes a user checklist. The pattern of recurring flaws in consumer robots is the real story.
Related event: Unitree Go2 Robot Dog Hit by Third Critical Flaw in a Year(4 posts)→
More from Embodied
- BEACON paper accepted to NeurIPS 2026: learns per-sample trust weights for cross-domain robot policy co-training — hankyang94 · 2026-10-27
- Apple introduces the new 14-inch MacBook Pro with M6 — meetpateltech · 2026-10-27
- Ex-Google engineer turns an old phone into an agent that finished 42 tasks overnight — nikola_mr64990 · 2026-10-27
- Luxonis launches OAK 4 FFC, its first OAK 4-based modular camera board for robots — lukas_m_ziegler · 2026-10-27
- Deft's robots have helped build ~20,000 Teslas at 700 parts/day with 100% uptime — micoolcho · 2026-10-27
- Germany's Neura Robotics raises $1.4B led by Tether as Europe bets on AI robotics — pstAsiatech · 2026-10-27