SecurityThe Hacker Newsabout 2 hours ago
Unitree G1 EDU Flaws Enable Root RCE
1 min read
Two root RCE chains affect the Unitree G1 EDU, tracked as CVE-2026-76639 and CVE-2026-76640. The first exploits a path-traversal in chat_go to reach bashrunner; the second starts over Bluetooth Low Energy. Unitree patched the cloud account-to-robot ownership check in July 2026, but no fixed firmware release is confirmed.
Level
Hype check
Tap to vote and see what everyone thinks.
