Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU humanoid robot. The vulnerabilities, tracked as CVE-2026-76639 and CVE-2026-76640, allow an attacker to achieve root-level access on the robot's Locomotion PC. One chain is exploitable over Bluetooth Low Energy (BLE), while the other uses a network-adjacent path through the chat_go and bashrunner components. Successful exploitation could let an attacker take full control of the robot, potentially causing physical harm. Patch information is not yet available.

What should defenders do?

As of the disclosure date, no patch information has been provided by Unitree. Organizations using the G1 EDU should monitor Unitree's official channels for firmware updates and security advisories. Until a patch is available, consider restricting network access to the robot and disabling Bluetooth when not in use. Additionally, ensure the robot is deployed in a controlled environment to minimize the risk of unauthorized physical or network access.

criticalVulnerability

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Researcher discloses two root remote code execution chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy path to the Locomotion PC.

CyberIntel DeskPublished about 1 month agoUpdated less than a minute ago1 min read

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Key Takeaways

Two root RCE vulnerabilities (CVE-2026-76639, CVE-2026-76640) affect the Unitree G1 EDU humanoid robot.
One attack chain is exploitable over Bluetooth Low Energy (BLE), allowing nearby attackers to gain root access.
The other chain uses a network-adjacent path through the chat_go and bashrunner components.

Related Security News

highVulnerability

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

The maintainers of the official MCP Python SDK disclosed a security vulnerability that could allow a malicious server to trick applications into divulging OAuth credentials. The issue affects the handling of client secrets, authorization codes, and PKCE proof keys when communicating with token endpoints.

The Hacker Newsabout 4 hours ago1 min read

highVulnerability

One Packet Can Crash OT Servers in Industrial Sectors

A high-severity zero-day vulnerability in the TDengine time-series database allows a single malformed packet to crash OT servers, potentially disrupting industrial, IoT, energy, and automotive operations. Details regarding exploitation status and remediation remain limited.

Dark reading1 day ago1 min read

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Key Takeaways

Related Security News

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

One Packet Can Crash OT Servers in Industrial Sectors

Quick answers

Security Details

Sources

Cloudflare Fixes Cross-Tenant Data Exposure Flaw in Workers Containers and Sandboxes

Linux Kernel KVM ARM64 Vulnerability Exposes Host Memory to Guests

MikroTrick: Chained MikroTik RouterOS SSH Vulnerabilities Enable Unauthenticated Router Takeover

Microsoft SharePoint Server Flaw Reclassified: Authenticated Remote Code Execution Confirmed