Two root-RCE chains in the Unitree G1 EDU humanoid, one reachable over Bluetooth with no pairing and no authentication · Jadid

Skip to content

JadidJust-in AI Developments, Incidents & Deadlines

Saturday, August 29, 2026 · 3 of 5

Two root-RCE chains in the Unitree G1 EDU humanoid, one reachable over Bluetooth with no pairing and no authentication
— CVE-2026-76639 and CVE-2026-76640, with no confirmed fixed firmware (Aug 27)
Security Robotics/IoT

Read the full briefing · 15 stories