G1 EDU vulnerabilities

2 known vulnerabilities in G1 EDU from Unitree Robotics. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  G1 EDU: Missing Authentication for Critical Functionality

  CVE-2026-76640Aug 27, 2026Unitree Robotics

  Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials by exploiting an unq

• 8.8 High severity

  G1 EDU: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-76639Aug 27, 2026Unitree Robotics

  Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port