CYBER● ELEVATEDAug 28 · Aug 28, 2026, 12:07 PM
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
The Hacker News · global
Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot's Locomotion PC. The flaws are tracked as CVE-2026-76639 and CVE-2026-76640, with the first involving a network-adjacent path through chat_go and bashrunner and the
GlobeAlert aggregates and classifies open sources; the story above belongs to its publisher. Summaries are machine-generated from the source text.
More in Cyber
CYBERnow[Virtual Event] Cybersecurity Outlook 2027Dark ReadingCYBERnow[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIDark ReadingCYBERBREAKING1h agoCritical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host MemoryThe Hacker NewsCYBER2h agoFake AI images of protester go viral after woman punched at Trump's Ohio rallyFrance 24 [en]