UniPwn wormable Bluetooth exploit roots Unitree Go2, B2, G1 and H1

Record

Summary

Researchers disclosed 'UniPwn,' a Bluetooth Low Energy exploit giving root-level access to Unitree Go2/B2 quadrupeds and G1/H1 humanoids; the flaw is wormable, letting a compromised robot automatically scan for and infect nearby Unitree units.

Primary source

Supporting source rows (1)

Date	Supporting source row	Publisher	Link
~Sep 2025	UniPwn wormable Bluetooth exploit roots Unitree Go2, B2, G1 and H1	The Robot Report	The Robot Report

Unitree other incidents timeline

Humanoid robots context

cyber context

Unitree industry position

Related incidents

Other Unitree entries

• 07 Sep 2026 - Unitree humanoid unexpectedly lunges at engineer and kicks remote control from his hand during test
• 27 Aug 2026 - Two root RCE flaws (CVE-2026-76639/76640) disclosed in Unitree G1 EDU
• ~Jul 2026 - FCC bars new Unitree robot models from US import/sale over backdoor concerns
• ~Dec 2025 - Unitree G1 accidentally kicks its own teleoperator during motion-mirroring demo
• ~Oct 2025 - Unauthenticated RCE flaws (CVE-2026-27509, CVE-2026-27510) found in Unitree Go2
• not documented - Unitree G1 robot kicks child in stomach during Xinjiang demo
• not documented - Backdoor (CVE-2025-2894) found in Unitree Go1 robot firmware
• not documented - Unitree H1 humanoid flails violently and nearly injures two engineers during test

Report a correction

Open a prefilled GitHub issue