Unitree Go2 Firmware Vulnerability Fixed After Discovery
A critical security flaw in the Go2 robot firmware could allow remote system command execution.
Updated on Oct. 28, 2026 in Robotics
Live Poll
Do you trust the security of internet-connected devices in your home?
Security researchers identified a high-severity vulnerability within the chat_go component of Unitree Go2 robot firmware. The flaw could enable unauthorized remote command execution on affected devices.
Why it matters
The vulnerability could allow attackers to bypass security measures and control the robot remotely. Updating the firmware ensures devices are protected against potential exploitation.
The vulnerability, tracked as CVE-2026-115995, features a 9.6 severity score and stems from improper input validation in the set_volume function. This flaw affects firmware versions up to 1.1.11.4, which can be mitigated by updating to version 1.1.11.5.
The players
Unitree
This company is a developer of quadrupedal robotic systems and advanced humanoid robotics.
TheHackerWire
This organization is a news entity focused on tracking cybersecurity developments and software vulnerabilities.
The details
Attackers can exploit the flaw by injecting malicious system commands into the set_volume input field of the chat_go process. The system executes these commands with the privileges of that process, though there is no evidence of active exploitation.
Timeline
October 24, 2026: Vulnerability details were published by TheHackerWire.
The Tech Race
The vulnerability currently does not appear on the CISA known exploited vulnerabilities list, indicating that it is not yet recognized as a primary target for active, widespread exploitation. This discovery highlights the ongoing security challenges as robotics manufacturers move beyond legacy systems toward connected software architectures.
Owners should update their Go2 robot firmware to version 1.1.11.5 or later immediately to patch the command execution vulnerability. Failing to apply these updates may leave the device susceptible to unauthorized remote access.
The takeaway
Maintaining updated firmware is essential for users of connected robotic hardware to prevent unauthorized access. Always monitor official manufacturer channels for critical security bulletins and software patches.
Further reading
For more information on the current landscape of robotic security, visit our Robotics section.
Source note: This article includes information reported by The Jolt Journal.
Live Poll
Do you trust the security of internet-connected devices in your home?
