Backdoor (CVE-2025-2894) found in Unitree Go1 robot firmware
S2 · 21 Mar 2025 · Unitree
Record
| Company | Unitree |
| Industry | Humanoid robots |
| Type(s) | cyber |
| Date | 21 Mar 2025 (day precision) |
| Time of day | not documented |
| Location | no physical site (recall / fleet-wide / aggregate record) |
| Severity | (minor injury or single-unit damage) |
| Scale | fleet-wide (Go1 model) |
| Confidence | high |
| Verified flag | Cited source on file; not independently re-verified |
Summary
Security researchers disclosed a firmware backdoor in Unitree's Go1 quadruped that auto-started on boot, tunneled to a China-based cloud server, and gave anyone with the right API key full remote control; vulnerable units were confirmed operating on networks at MIT, Princeton, Carnegie Mellon and the University of Waterloo.
Primary source
Publisher: OECD.AI Incident Monitor · Retrieved: 2026-09-16
Supporting source rows (1)
| Date | Supporting source row | Publisher | Link |
|---|---|---|---|
| 21 Mar 2025 | Backdoor (CVE-2025-2894) found in Unitree Go1 robot firmware | OECD.AI Incident Monitor | OECD.AI Incident Monitor |
Unitree other incidents timeline
Humanoid robots context
cyber context
Unitree industry position
Related incidents
Other Unitree entries
- 07 Sep 2026 - Unitree humanoid unexpectedly lunges at engineer and kicks remote control from his hand during test
- 27 Aug 2026 - Two root RCE flaws (CVE-2026-76639/76640) disclosed in Unitree G1 EDU
- ~Jul 2026 - FCC bars new Unitree robot models from US import/sale over backdoor concerns
- 01 Jun 2026 - Unitree G1 robot kicks child in stomach during Xinjiang demo
- ~Dec 2025 - Unitree G1 accidentally kicks its own teleoperator during motion-mirroring demo
- ~Oct 2025 - Unauthenticated RCE flaws (CVE-2026-27509, CVE-2026-27510) found in Unitree Go2
- ~Sep 2025 - UniPwn wormable Bluetooth exploit roots Unitree Go2, B2, G1 and H1
- ~2025 - Unitree H1 humanoid flails violently and nearly injures two engineers during test
Report a correction
Also from Critical Systems Analysis: CSA - functional safety engineering · Company directory · FSTalent - functional safety jobs