Reported by 2 outlets
Unitree G1 Humanoid Robot BLE Vulnerabilities Enable Unauthenticated Root RCE
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.58 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Unitree G1 Humanoid Robot Flaws Allow Unauthenticated Root RCE Over Bluetooth
gbhackers.com · 46d ago · August 28th, 2026
Security researcher Boschko has revealed two vulnerabilities in Unitree’s G1 humanoid robot that can be exploited to achieve unauthenticated remote code execution (RCE) from nearby devices via Bluetooth Low Energy (BLE). This research, referred to as UniBLEed, indicates that the attack can compromise the robot’s Locomotion PC, the component responsible for essential functions, without requiring […] The post Unitree G1 Humanoid Robot Flaws Allow Unauthenticated Root RCE Over Bluetooth appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cyberpress.org
Unitree G1 Humanoid Robot Flaws Enable Unauthenticated Root RCE Over Bluetooth
cyberpress.org · 46d ago · August 28th, 2026
A newly disclosed flaw in Unitree’s G1 humanoid robot could allow an attacker standing nearby to obtain unauthenticated remote code execution as root via Bluetooth Low Energy (BLE). The research, dubbed UniBLEed, targets the robot’s Locomotion PC, a Linux-based system that supports safety-critical operations including motors, cameras, audio, and voice. The Bluetooth attack chain, tracked as CVE-2026-76640, begins with GATT characteristic 0xFFE2. The interface accepted writes using only basic WRITE permissions, enabling a device within radio range to communicate with the robot without BLE pairing or authentication. Unitree G1 Humanoid Robot Flaws A plaintext bootstrap request then returned a robot-specific AES-128 key inside an RSA-encrypted response. Although RSA wrapping would normally prevent recovery of that secret, Boschko found that Unitree’s /device/bindExtData cloud API could decrypt the returned material and reveal the plaintext AES key to any authenticated Unitree account. Crucially, the endpoint reportedly failed to check whether the submitted serial number belonged to that account. An attacker near a target could therefore retrieve a secret associated with the robot’s BLE version 3 provisioning and Wi-Fi setup. Armed with the key, the researcher accessed protected BLE functions and supplied a 121-byte pre-shared key that triggered an insecure Wi-Fi fallback in wpa_connect.sh . Attacker-controlled content entered an unquoted heredoc, allowing manipulation of the gen