Full Report
Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot's Locomotion PC. The flaws are tracked as CVE-2026-76639 and CVE-2026-76640, with the first involving a network-adjacent path through chat_go and bashrunner and the
Analysis Summary
# Vulnerability: Unitree G1 EDU Locomotion PC Root RCE Chains
## CVE Details
- **CVE ID:** CVE-2026-76639 and CVE-2026-76640
- **CVSS Score:** Not explicitly listed (High/Critical Severity implied by Root RCE)
- **CWE:** CWE-22 (Path Traversal), CWE-120 (Buffer Overflow), and CWE-285 (Improper Authorization)
## Affected Systems
- **Products:** Unitree G1 EDU Humanoid Robot
- **Versions:** Research confirmed on V1.5.2; applicability to other versions and the standard G1 model is currently unconfirmed.
- **Configurations:** Systems utilizing `chat_go`, `bashrunner`, and Bluetooth Low Energy (BLE) provisioning features.
## Vulnerability Description
Researcher Olivier Laflamme identified two distinct attack chains that grant root-level access to the robot's Locomotion PC:
1. **CVE-2026-76639 (Network-Adjacent Path):** A path-traversal vulnerability exists in the `chat_go` component. An attacker can exploit this to reach the `bashrunner` utility, which executes commands with root privileges on the Locomotion PC.
2. **CVE-2026-76640 (BLE/Cloud Chain):** This chain involves an authorization gap in Unitree’s cloud service where an account could request key material for a robot it did not own. These keys allowed an attacker to bypass BLE pairing/authentication requirements. Once authenticated via BLE, a buffer overflow in the Wi-Fi provisioning code was triggered to achieve root RCE.
## Exploitation
- **Status:** PoC available (demonstrated by researcher); cloud-based key recovery primitive reportedly patched.
- **Complexity:** Medium (requires knowledge of specific robot services and BLE interaction).
- **Attack Vector:** Network-Adjacent / Adjacent (BLE proximity).
## Impact
- **Confidentiality:** High (Full access to Locomotion PC data).
- **Integrity:** High (Ability to execute arbitrary code as root).
- **Availability:** High (Potential to disable or hijack robot locomotion).
## Remediation
### Patches
- **Cloud-side:** Unitree reportedly patched the cloud account-to-robot ownership check in July 2026, breaking the remote key-recovery portion of the BLE chain.
- **Firmware:** As of August 27, 2026, no specific fixed firmware version has been verified for the G1 EDU to address the underlying buffer overflow and path traversal flaws.
### Workarounds
- Disable Bluetooth when not in use for provisioning.
- Isolate the robot on a secure, restricted network segment to prevent network-adjacent exploitation of `chat_go`.
- Ensure the robot is only bound to trusted Unitree accounts.
## Detection
- **Indicators of Compromise:** Unusual binary execution originating from `bashrunner`, unexpected Wi-Fi configuration changes, or unauthorized BLE connection attempts.
- **Detection methods:** Monitor network traffic for path traversal patterns (e.g., `../`) directed at the robot's internal services.
## References
- **Researcher Technical Disclosure:** hxxps[://]boschko[.]ca/g1-ble-rce/
- **Unitree Product Page:** hxxps[://]www[.]unitree[.]com/g1/
- **Original Report:** hxxps[://]thehackernews[.]com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html