Unitree Go2 robot dog hit by 9.4-severity remote command injection bug, third in a year

AIFlow_ML · x · 2026-10-27

Unitree Go2's AI chat module contained a remote command injection vulnerability rated 9.4/10 (critical). Affected firmware versions are 1.1.11.0 through 1.1.11.4; the issue is fixed in 1.1.11.5 and Unitree has confirmed it. No public exploit appears in the NVD entries.

This is the third serious Go2 security bug in roughly a year. Owners are urged to update their firmware; the author shared a lab checklist for verification.

Related event: Unitree Go2 Robot Dog Hit by Third Critical Flaw in a Year(4 posts)→

Original post →

More from Embodied

Embodied channel →