Security researcher Olivier Laflamme disclosed two independent root remote code execution (RCE) vulnerabilities affecting the Unitree G1 EDU humanoid robot. The flaws are tracked as CVE-2026-76639 and CVE-2026-76640. One vulnerability involves a network-adjacent attack path through chat_go and bashrunner components, while the other exploits Bluetooth Low Energy (BLE) to achieve root access on the robot's Locomotion PC. Both vulnerabilities allow unauthenticated attackers to gain full root-level control of the device. The Unitree G1 EDU is a humanoid robot platform used in research and educational settings. These flaws represent a significant risk given the physical capabilities of humanoid robots and their potential for misuse if compromised remotely.
Two independent root RCE chains were disclosed affecting the Unitree G1 EDU humanoid robot by researcher Olivier Laflamme on August 27, 2026. CVE-2026-76639 exploits a path-traversal vulnerability in the 'chat_go' component to reach 'bashrunner', which then executes code as root on the robot's Locomotion PC. This is a network-adjacent attack vector. CVE-2026-76640 is a BLE (Bluetooth Low Energy)-initiated chain: the initial BLE write path accepts a bootstrap interaction without requiring Bluetooth pairing. Unitree's cloud service previously failed to verify that a requesting account actually owned the supplied robot serial/identifier, allowing any valid Unitree account to recover key material belonging to another G1 EDU. The recovered key material could be used to establish an authenticated BLE state required for Wi-Fi provisioning operations. A buffer overflow in the Wi-Fi provisioning code then achieves root code execution on the Locomotion PC. Laflamme demonstrated propagation across two G1 robots in one room. Unitree patched the cloud account-to-robot ownership check in July 2026, breaking the exact cloud-assisted proof-of-concept flow, but no confirmed fixed firmware version has been verified.
1. Monitor Unitree's official channels and product page for confirmed fixed firmware versions for CVE-2026-76639 and CVE-2026-76640. 2. Ensure G1 EDU robots are updated to the latest available firmware once a confirmed patched release is identified. 3. Restrict network-adjacent access to G1 EDU robots, particularly blocking unauthorized access to the chat_go and bashrunner services. 4. Limit Bluetooth Low Energy proximity access to authorized personnel only; consider physical and logical controls to prevent unauthorized BLE interactions. 5. Verify that your Unitree cloud account credentials are secured and not shared, as the cloud ownership check has been patched (July 2026) but on-device vulnerabilities remain unconfirmed as fixed. 6. Isolate G1 EDU robots on dedicated network segments to minimize lateral movement risk. 7. Follow up with Unitree directly to confirm the patched firmware release and affected product scope, including whether other Unitree robot models are affected.
