UUnitree

Products

Exploited and recent CVEs

• CVE-2026-1442 High 7.8 Unitree UPK files Hard-Coded Key 0.2%
• CVE-2025-35027 High 7.3 Unitree Multiple Robotic Products Command Injection 2.7%
• CVE-2025-35027 High 7.3 Unitree Multiple Robotic Products Command Injection 2.7%
• CVE-2025-60251 Medium 5.0 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring. 0.2%
• CVE-2025-60017 High 8.2 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restart_wifi_sta). 1.1%
• CVE-2025-60250 Medium 4.7 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV. 0.2%
• CVE-2025-60251 Medium 5.0 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring. 0.2%
• CVE-2025-60017 High 8.2 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restart_wifi_sta). 1.1%
• CVE-2025-60250 Medium 4.7 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV. 0.2%
• CVE-2025-60017 High 8.2 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restart_wifi_sta). 1.1%
• CVE-2025-60250 Medium 4.7 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV. 0.2%
• CVE-2025-60251 Medium 5.0 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring. 0.2%
• CVE-2025-60017 High 8.2 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restart_wifi_sta). 1.1%
• CVE-2025-60250 Medium 4.7 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV. 0.2%
• CVE-2025-60251 Medium 5.0 Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring. 0.2%
• CVE-2025-2894 Medium 6.6 Unitree Go1 Robot Dog Backdoor Control Channel 0.9%
• CVE-2022-2675 Unrated Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down 0.5%