G1 vulnerabilities

2 known vulnerabilities in G1 from Unitree. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Go2: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-35027Sep 26, 2025UnitreeEPSS 2.69%

  Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. By setting a malicious string when configuring the on-board WiFi via a BLE module of an affected robot, then t

• 8.2 High severity

  Go2: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-60017Sep 26, 2025UnitreeEPSS 1.08%

  Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restart_wifi_sta).