Security researcher Olivier Laflamme disclosed two separate root remote code execution vulnerabilities in the Unitree G1 EDU humanoid robot. These flaws enable attackers to gain administrative control over the robot's core systems with minimal prerequisites.
The vulnerabilities are tracked as CVE-2026-76639 and CVE-2026-76640. CVE-2026-76639 operates through a network-adjacent attack vector involving two compromised components: chat_go and bashrunner. An attacker positioned on the same network segment can exploit this chain to escalate privileges to root on the robot's Locomotion PC. This attack requires no authentication and leverages insecure inter-process communication or input validation flaws within these services.
CVE-2026-76640 presents a more concerning attack surface. This vulnerability uses Bluetooth Low Energy (BLE) to reach root access on the Locomotion PC. BLE operates at short range but requires no network connection, meaning an attacker with physical proximity to the robot can launch the exploit. This is particularly problematic for educational and commercial deployments where robots operate in shared spaces like universities, research facilities, or corporate environments.
The Unitree G1 EDU targets educational institutions and developers, making it a popular platform for robotics research and learning. The robot's architecture includes multiple processors, with the Locomotion PC handling movement control and sensor integration. Compromise of this component grants attackers command over the robot's physical behavior, potentially creating safety hazards or enabling unauthorized surveillance through onboard cameras and microphones.
Laflamme's disclosure indicates both vulnerabilities affect the Locomotion PC specifically, suggesting the robot's architecture isolates critical functions but fails to secure communication channels properly. The presence of exposed services like chat_go and bashrunner indicates developers left debugging or administrative interfaces accessible in production firmware.
The network-adjacent nature of CVE-2026-76639 means attackers need only access to the same WiFi or LAN segment. In educational settings, this includes students and visitors. The BLE vector in CVE-2026-76640 eliminates even that requirement. An attacker simply needs to be within Bluetooth range, typically 10 to 100 meters depending on obstacles and antenna power.
Root access on the Locomotion PC enables complete control over the robot's operations. Attackers can modify motor commands, bypass safety constraints, disable emergency stops, or inject malicious firmware. For robots deployed in sensitive environments like hospitals, manufacturing floors, or research labs, this creates operational and safety risks. Additionally, administrative access allows extraction of proprietary code, configuration data, or sensor information collected during operation.
Unitree has not yet released patches for either vulnerability at the time of disclosure. Organizations deploying Unitree G1 EDU units should immediately evaluate their network segmentation and physical access controls. In educational environments, restrict robot access to trusted personnel, disable Bluetooth if not required, and isolate robot networks from general campus infrastructure when possible.
The disclosure highlights a recurring pattern in robotics security. Manufacturers prioritize functionality and ease of deployment over hardening attack surfaces. As these robots move from labs into production environments, securing communication protocols and eliminating unnecessary administrative interfaces becomes essential.