All Your Unitree Robot Are Belong To Us

[Alan Timm]

So this is worrying.  A simple bluetooth exploit available on ALL Unitree robots allows remote code execution, including a sudden reboot, bricking, and of course arbitrary remote code execution.

In addition, the researchers found that the robots are transmitting comprehensive telemetry and sensor data to two chinese server ips.  not a good look.

I've mentioned it a few times before, just like autonomous cars, robots need to be locked down for safety sake.  The 1984 movie Runaway was a warning, not a guide.

Cybersecurity AI: Humanoid Robots as Attack Vectors

https://arxiv.org/abs/2509.14139

Is My Unitree G1 Spying on Me?

https://www.youtube.com/watch?v=Ah0-l0HZwLA

Unitree Robot BLE Service Command Injection Analysis

https://github.com/Bin4ry/UniPwn/tree/main

Statement to our respected Unitree users

https://x.com/UnitreeRobotics/status/1972667504276210004