started · updated
Unitree G1 EDU robots face critical root access vulnerabilities
Security researcher Olivier Laflamme has identified two critical vulnerabilities in the Unitree G1 EDU humanoid robot that could allow attackers to gain full root-level control. The flaws, documented as CVE-2026-76639 and CVE-2026-76640, involve distinct attack vectors.
The first vulnerability, dubbed ‘UniBLEed’, exploits Bluetooth Low Energy (BLE). It allows an unauthenticated attacker within radio range to bypass pairing requirements and access the robot’s system. This attack chain is described as potentially wormable, meaning a compromised robot could autonomously attack other G1 units in proximity.
The second vulnerability involves flaws in Unitree’s cloud authorization process. An attacker can use a standard Unitree account to request the decryption of a robot’s unique AES-128 encryption key via the cloud API, as the system fails to verify if the account holder actually owns the targeted device. This allows for the recovery of device-specific keys used for secure communication.
Additionally, a separate attack chain was identified involving the robot’s AI chatbot service. By exploiting a path traversal vulnerability, an attacker could write arbitrary files to the filesystem and execute code with root privileges via the ‘bashrunner’ service.
Entities
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 5 SOURCES] The vulnerability identified as CVE-2026-76639 allows root access via Bluetooth Low Energy without pairing or authentication. www.it-boltwise.de · www.ad-hoc-news.de · www.blogspan.net · cybersecuritynews.com · securityaffairs.com
- [● 5 SOURCES] The vulnerability identified as CVE-2026-76640 involves cloud authorization flaws that can lead to the disclosure of cryptographic keys. www.it-boltwise.de · www.ad-hoc-news.de · www.blogspan.net · cybersecuritynews.com · securityaffairs.com
- [● 3 SOURCES] The Bluetooth-based attack, named UniBLEed, is potentially wormable, allowing an infected robot to attack others in range. www.blogspan.net · cybersecuritynews.com · securityaffairs.com
- [● 5 SOURCES] Two independent attack chains against the Unitree G1 EDU can achieve root code execution on the locomotion PC. www.it-boltwise.de · www.ad-hoc-news.de · www.blogspan.net · cybersecuritynews.com · securityaffairs.com
- [○ 1 SOURCE] Each G1 robot uses a unique 16-byte key file that is generated once and never rotated. www.blogspan.net