Vulnerabilities · 46 days ago

Unitree G1 EDU Flaws Reach Root Over BLE

Olivier Laflamme published two root remote code execution chains against the Unitree G1 EDU on August 27, including CVE-2026-76640, which starts from Bluetooth Low Energy (BLE) proximity and reaches the robot’s locomotion PC. He also described CVE-2026-76639, a separate chain that goes through chat_go and bashrunner.

The BLE path accepts an initial setup write from someone nearby without pairing, then uses cloud key-recovery and authenticated provisioning to move into Wi‑Fi setup code, where a buffer overflow lands root on the locomotion PC. Unitree has fixed the cloud account-to-robot ownership check, but the reported firmware status is still unsettled because no publicly verified fixed release is available.

For owners of the G1 EDU, the exposure is not just in cloud binding: a person close to the robot may still be able to reach the control plane through BLE and end at root on the machine that drives movement. Until a verified firmware target exists, the remaining risk sits with physical access and provisioning workflows, not only with accounts.

CVE-2026-76639

NVD KEV

CVSS 8.8 HIGH: unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows…

CVE-2026-76640

NVD KEV

CVSS 7.5 HIGH: unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi…

Timeline

Aug 28 Reported by The Hacker News

Sources

1 source covering this story

The Hacker News Aug 28
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
Two Unitree G1 EDU vulnerabilities enable separate root RCE chains, including a BLE path; fixed firmware versions remain unverified.

Entities

CVE-2026-76639
CVE-2026-76640

Part of the PlainSec briefing for 2026-08-29

Editions

Vulnerabilities · 46 days agoUnitree G1 EDU Flaws Reach Root Over BLEOlivier Laflamme published two root remote code execution chains against the Unitree G1 EDU on August 27, including CVE-2026-76640, which starts from Bluetooth Low Energy (BLE) proximity and reaches the robot’s locomotion PC. He also described CVE-2026-76639, a separate chain that goes through chat_go and bashrunner.The BLE path accepts an initial setup write from someone nearby without pairing, then uses cloud key-recovery and authenticated provisioning to move into Wi‑Fi setup code, where a buffer overflow lands root on the locomotion PC. Unitree has fixed the cloud account-to-robot ownership check, but the reported firmware status is still unsettled because no publicly verified fixed release is available.For owners of the G1 EDU, the exposure is not just in cloud binding: a person close to the robot may still be able to reach the control plane through BLE and end at root on the machine that drives movement. Until a verified firmware target exists, the remaining risk sits with physical access and provisioning workflows, not only with accounts.