Unitree G1 EDU Robots Exposed to Root RCE via Bluetooth Flaws

Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU humanoid robot, one of which can be initiated over Bluetooth Low Energy (BLE) without pairing. Tracked as CVE-2026-76639 and CVE-2026-76640, the flaws expose the robot's Locomotion PC to full compromise. CVE-2026-76639 chains a path-traversal condition in the chat_go service through bashrunner to achieve root code execution, while CVE-2026-76640 begins with an unauthenticated BLE bootstrap interaction that escalates into a buffer overflow during Wi-Fi provisioning. The disclosure, published August 27, 2026, raises urgent concerns for G1 EDU owners, as no confirmed firmware patch has been published in any official Unitree guidance. Organizations deploying these robots should run a port scanner to audit any reachable chat_go or BLE-adjacent services while awaiting a vendor fix.

CVE-2026-76640 is particularly concerning because the BLE write path accepts bootstrap interaction without Bluetooth pairing. While the bootstrap material itself remains protected, an attacker with the recovered key can establish the authenticated BLE state needed for Wi-Fi provisioning. Laflamme demonstrated that Unitree's cloud service previously accepted a valid account for a key-recovery request without verifying the requesting account actually owned the target robot, allowing key material associated with another G1 EDU to be recovered. Unitree reportedly patched this cloud authorization gap in July 2026, but the underlying firmware-level RCE chains remain unaddressed. Operators reviewing their IoT attack surface should verify device accounts and check credentials using an email breach checker to ensure no Unitree cloud account compromise is in play.

Laflamme's proof-of-concept was limited to two G1 robots in one room, and he confirmed that the August 2026 cloud authorization fix breaks the original exploit chain. However, the firmware-level flaws in the Locomotion PC have not been confirmed patched in any verified release, with Laflamme's testing reaching up to V1.5.2 but not conclusively confirming V1.5.1.1 as vulnerable or clean. Whether other Unitree models beyond the G1 EDU share these weaknesses remains unconfirmed, as Unitree's own product pages distinguish the G1 and G1 EDU as separate offerings. Until vendors publish a verified fix, security teams should segment IoT robots from production networks, audit Wi-Fi provisioning endpoints with an SSL/TLS checker, and monitor for anomalous BLE proximity activity targeting embedded devices.