Unitree Go2 vulnerabilities

2 known vulnerabilities in Unitree Go2 from UnitreeRobotics. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Unitree Go2: Insufficient Verification of Data Authenticity

  CVE-2026-27510Feb 26, 2026UnitreeRobotics

  Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing integrity protection and validation of user-created programmes. The Android appl

• 8.0 High severity

  Unitree Go2: Missing Authentication for Critical Functionality

  CVE-2026-27509Feb 26, 2026UnitreeRobotics

  Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager.py. A network-adjacent, unauthenticated