Read the docs

Unitree

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Unitree records in CISA KEV

No Unitree vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Go1 Firmware 3 records HIGH Go2 Firmware 3 records HIGH A1 Firmware 2 records LOW B2 Firmware 1 record HIGH G1 Firmware 1 record HIGH Go1 Air Firmware 1 record HIGH Go1 Pro Firmware 1 record HIGH Go2 Air Firmware 1 record HIGH

Records

3 records in Go2 Firmware · all components

TI-2026-21913 CVE-2026-27509 · GHSA-hcv4-2wj7-9p5g

Unitree Go2 Missing DDS Authentication Enables Adjacent RCE

Priority HIGH 72

Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager…

CVSS 4.0HIGH 8.5 Adjacent network No auth User interaction EPSS 0.00646 Published 2026-02-26 No fix listed CWE-306
TI-2025-24557 CVE-2025-35027 · GHSA-27p8-m7h9-xchc

Unitree Multiple Robotic Products Command Injection

Priority HIGH 67

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability.

CVSS 3.1HIGH 7.3 Adjacent network Low privileges No interaction EPSS 0.02685 Published 2025-09-26 No fix listed CWE-78
TI-2026-21914 CVE-2026-27510 · GHSA-c2p8-28pf-f3mr

Unitree Go2 Mobile Program Tampering Enables Root RCE

Priority MEDIUM 62

Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing integrity protection and validation of u…

CVSS 4.0MEDIUM 6.4 Network No auth User interaction EPSS 0.00445 Published 2026-02-26 No fix listed CWE-345
Open these records in search →