UniBLEed: Root RCE on Any Unitree G1 Humanoid Robot

Root on a $20,000 humanoid robot from Bluetooth range. One chain crossing Bluetooth, Unitree’s cloud, mobile, and the firmware running the G1 itself. Here’s the complete technical breakdown of the $6,700 bounty and two CVEs it produced: CVE-2026-76639 / CVE-2026-76640.

UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range Root on a $20,000 humanoid robot from Bluetooth range. One chain crossing Bluetooth, Unitree’s cloud, mobile, and the firmware running the G1 itself. Here’s the complete technical breakdown of the $6,700 bounty and two CVEs it produced: CVE-2026-76639 / CVE-2026-76640. Root on a $20,000 humanoid robot, via a cloud API that decrypts any G1's AES key from any free Unitree account without checking ownership. One BLE characteristic that accepts writes without pairing. A heredoc injection that hijacks…

saved by

• Eva L

related reading

• GitHub - Bin4ry/UniPwn at boschko.cagithub.com
• How China's Unitree Will Dominate Global Roboticsnewsletter.semianalysis.com
• Training a Misaligned Reward Seekeralignment.anthropic.com
• Unitree's Impossible Trajectory Is Still Overlookednewsletter.semianalysis.com
• Multiple Vulnerabilities in Rocket Software UniData's UniRPC server (Fixed) | Rapid7 Blograpid7.com
• Countering misuse of AI: September 2026 / Anthropicanthropic.com
• GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blogwiz.io
• Security incident disclosure — July 2026huggingface.co
• The Embodied Internetben.bolte.cc
• UniTracker: Learning Universal Whole-Body Motion Tracker for Humanoid Robotsarxiv.org
• [2608.09867] Stealing Reasoning Traces from Proprietary LLM APIsarxiv.org
• Hacking OpenAIhacktron.ai