Hack One Robot, Reach the Next: Unitree G1 Security Flaws
Researcher chained two Unitree G1 flaws (CVE-2026-76639, CVE-2026-76640) to gain unauthenticated root access, with compromised robots able to infect others via Bluetooth.
Security researcher Olivier Laflamme chained a path-traversal file-write flaw (CVE-2026-76639) in the G1 chatbot service and a Bluetooth server buffer overflow (CVE-2026-76640) to achieve unauthenticated root access remotely. The chain abuses Unitree's cloud API as a decryption oracle for the AES-128 key that unlocks BLE and WebRTC channels, and a compromised robot can propagate the attack to nearby G1 units. Unitree patched the cloud ownership-check flaw, paid a $5,000 bounty, and firmware fixes for BLE pairing and the buffer overflow remain harder to deliver.
- CVE-2026-76639: path traversal in chatbot knowledge upload enables arbitrary file writes
- CVE-2026-76640: 500-byte buffer overflow in Bluetooth server yields root shell
- Unitree cloud API leaked AES key decryption without verifying robot ownership
- Compromised robots can re-attack other G1 units in Bluetooth range
- Vendor patched cloud check within two months; $5,000 bounty paid
- Vendors
- Unitree
- Products
- Unitree G1
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-76639+1 related CVE | Unauthenticated Root RCE Chain in Unitree G1 EDU Robot Firmware | 8.7 group max | <1% |
From the original article
5 min read at securityaffairs.com
A researcher chained two Unitree G1 flaws to gain root access remotely and showed how a compromised robot could attack others nearby. Security researcher Olivier Laflamme spent about three months digging into the Unitree G1 humanoid robot and eventually found a way to fully compromise it without plugging in a single cable.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.