Unitree · Unitree B2 · CVE-2025-35027
**Name of the Vulnerable Software and Affected Versions**
Unitree robotic products (Go2, G1, H1, and B2 devices)
**Description**
Multiple Unitree robotic products sharing a common firmware contain a command injection issue. An attacker can inject a malicious string during WiFi configuration via a BLE module, and then trigger a restart of the WiFi service. This allows the attacker to execute commands as root through the `wpa supplicant restart.sh` shell script. The vulnerability affects devices using firmware derived from the MIT Cheetah codebase, including the G1 (humanoid) and Go2 (quadruped) branches.
**Recommendations**
Unitree Go2 robots: Consider temporarily disabling the bluetooth protocol as a mitigation measure.
Unitree G1 robots: Consider temporarily disabling the bluetooth protocol as a mitigation measure.
Unitree H1 robots: Consider temporarily disabling the bluetooth protocol as a mitigation measure.
Unitree B2 robots: Consider temporarily disabling the bluetooth protocol as a mitigation measure.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.