Security researcher Olivier Laflamme has identified two separate vulnerabilities in the Unitree G1 EDU humanoid robot. These flaws allow attackers to gain full root access to the device. The issues were disclosed recently and affect the robot’s core operating system. One specific attack vector operates entirely over Bluetooth Low Energy. This discovery highlights significant security gaps in modern autonomous hardware. The findings have been assigned official Common Vulnerabilities and Exposures identifiers for tracking purposes.
The first vulnerability enables a remote code execution chain via Bluetooth Low Energy. An attacker within range can exploit this flaw to compromise the Locomotion PC. Once inside, they achieve root privileges without user interaction. The second flaw provides an alternative path to the same level of control. Both issues are independent, meaning fixing one does not automatically resolve the other. They represent distinct entry points into the robot’s internal architecture.
The Bluetooth-based exploit is particularly concerning for physical security teams. It allows a malicious actor to interact with the robot wirelessly. No physical connection or network login is required for the initial breach. The attacker leverages standard BLE protocols to inject malicious commands. This process escalates privileges until the attacker controls the root shell. Such access grants total command over the robot’s movement and sensors. Laflamme demonstrated that the entire sequence could be executed remotely. The lack of robust authentication in the BLE stack facilitated this rapid escalation.
Having two separate routes to root access complicates remediation efforts. Developers must address both CVE-2026-76639 and CVE-2026-76640 simultaneously. If only one patch is applied, the other remains open. This dual-path scenario increases the window of exposure for deployed units. Organizations using these robots in sensitive environments face higher risk. They cannot rely on a single fix to secure their fleet. The independence of these bugs suggests deeper architectural weaknesses in the firmware.
The implications extend beyond immediate technical fixes. Manufacturers must review how they handle wireless interfaces on embedded systems. Future updates should prioritize strict input validation for all external communication channels. Users of the G1 EDU model should monitor vendor announcements for patches. Until then, limiting physical proximity to the robot reduces the attack surface. The disclosure serves as a warning for the broader robotics industry. As humanoids become more common, their security posture must match their complexity.
Can the Bluetooth flaw be exploited from long distances? No, the Bluetooth Low Energy attack requires the attacker to be within standard BLE range. This typically limits the distance to a few meters. Proximity is a key factor in executing this specific exploit.
Do both vulnerabilities require user interaction? No, both chains allow for remote code execution without user input. The attacker can trigger the exploits autonomously once within range. This makes them highly effective for unattended devices.