Executive brief
Unitree G1 EDU humanoid robots contain multiple chained security flaws in their Bluetooth and WiFi configuration systems that allow nearby attackers to gain complete control without needing to pair with the device or provide credentials. By sending specially crafted wireless signals, an attacker can overwrite memory in the robot's firmware, redirect the device's core control logic, and execute arbitrary commands with root-level privileges. A compromised robot can then spread the same exploit to other nearby robots wirelessly.
Technical details
CVE-2026-76640 is a multi-bug exploitation chain targeting the Unitree G1 firmware BLE GATT server and WiFi provisioning subsystem. The primary flaw is a 1050-byte buffer overflow in the WiFi SSID accumulator that corrupts an adjacent function pointer in the mainloop's event dispatcher, combined with an unquoted heredoc injection in wpa_connect.sh that allows arbitrary WiFi configuration. The attack chain exploits an unauthenticated BLE characteristic (0xFFE2) that accepts writes without pairing, a cloud API endpoint that decrypts AES keys without verifying device ownership, and a WiFi provisioning fallback mechanism that trusts attacker-controlled data. Once chained together, this allows unauthenticated proximate attackers within Bluetooth range to achieve unauthenticated root code execution by forging mainloop cleanup entries and invoking system() as uid 0. The vulnerability is "wormable"—a compromised robot can exploit nearby G1 devices autonomously. Patches are available in firmware versions beyond 1.5.2.
Affected products
- Unitree G1 EDU firmware through 1.5.2
Timeline
- 2026-08-27: disclosed: Advisory published; research blog and PoC released
- 2026-08-27: kev added: Vulnerability added to CVE ecosystem