Two Root RCE Flaws Disclosed in Unitree G1 EDU Humanoid Robot, One Via Bluetooth

Discovery of Critical Vulnerabilities

Security researcher Olivier Laflamme has revealed two distinct root remote code execution (RCE) vulnerabilities impacting the Unitree G1 EDU humanoid robot. These flaws, tracked as CVE-2026-76639 and CVE-2026-76640, enable attackers to achieve root access on the robot's Locomotion PC. The disclosure was made on August 27, 2026, detailing the separate attack paths.

Technical Details of the Exploits

CVE-2026-76639 involves a network-adjacent path that exploits a path-traversal condition in 'chat_go' to reach 'bashrunner', leading to root code execution. CVE-2026-76640 begins with a Bluetooth Low Energy (BLE) write path that accepts bootstrap interaction without requiring Bluetooth pairing. This BLE chain, combined with a buffer overflow in Wi-Fi provisioning code, also results in root execution on the Locomotion PC. Laflamme noted that a cloud authorization fix implemented by Unitree in July 2026 addresses a specific cloud account-to-robot ownership check that was part of the original proof-of-concept for the BLE vulnerability.

Impact and Lack of Patch Information

The existence of these unpatched vulnerabilities means Unitree G1 EDU owners are currently exposed to potential unauthorized control of their robots. As of the disclosure date, Unitree has not verified an exact fixed firmware release in any accessible guidance, leaving users without a clear timeline or target for remediation. The cloud authorization fix only addresses one component of the BLE chain, and the core vulnerabilities remain.