A critical vulnerability in the Bluetooth Low Energy interface of Unitree robots allows attackers to take complete control, potentially creating a wormable botnet. Discovered by security researchers, this exploit affects multiple models and highlights ongoing security lapses in Unitree's firmware, raising concerns about the robots' deployment in sensitive environments. Despite attempts at responsible disclosure, Unitree has been unresponsive, prompting researchers to publicize the issue.
Security researchers have uncovered a serious vulnerability in Unitree Go1 robot dogs, allowing unauthorized remote access to the devices and their cameras through an undocumented service called CloudSail. This flaw, attributed to poor code review practices, poses significant risks, particularly in sensitive environments, prompting experts to recommend users disconnect the devices from their networks.