Security Researcher Identifies Two Vulnerabilities in Unitree Robots

Security researcher Olivier Laflamme has uncovered two significant vulnerabilities in the Unitree G1 humanoid robot, one of which allows remote access through Bluetooth. Unitree, the manufacturer, has confirmed these issues and released patches to mitigate them.

The first vulnerability, named UniBLEed, permits unauthorized Bluetooth connections without requiring user confirmation or a password. When the robot receives connection requests, it sends an encrypted service block, which contains an AES-128 key, serial number, and Bluetooth address, all protected by RSA encryption. The intention was for only Unitree's cloud to decrypt this information.

However, the system incorrectly accepted the block and returned decrypted data to any registered user, regardless of ownership of the robot. Laflamme noted, “There was authentication, but no authorization.” This flaw allowed an attacker to identify the G1's serial number from its Bluetooth broadcasts or through an unencrypted request, enabling access to the robot's encrypted communications, including Wi-Fi settings.

Using a script named wpa_connect.sh, an attacker could input a 121-byte Wi-Fi password, putting the robot into an insecure manual mode for network settings, which could then be manipulated to connect to an attacker's controlled hotspot.

The second vulnerability, classified as CVE-2026-76640, arises from a buffer overflow in the Bluetooth server. Laflamme demonstrated this by sending excessive data to the robot, which overwrote critical memory structures and allowed execution of system commands with root privileges. This particular exploit poses a risk of cascading attacks, as a compromised G1 could potentially target other robots within Bluetooth range.

For his discoveries, Laflamme was awarded $5,000. Recently, Unitree also introduced their "Superman" humanoid robot, which boasts impressive capabilities, including a running speed of 12.66 m/s and a jump height of 2 meters.