PT-2025-30848 · Unitree · Unitree Go 1

Published 2025-07-25 · Updated 2025-07-30 · CVE-2025-45466

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Unitree Go1 versions through Go1 2022 05 11

Description The Unitree Go1 is susceptible to an incorrect access control issue. This is due to authentication credentials being hardcoded in plaintext.

Recommendations Unitree Go1 versions through Go1 2022 05 11: Address the issue by removing the hardcoded authentication credentials from the system.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-45466

Affected Products

Unitree Go 1

References · 5

• 🔥 https://github.com/zgsnj123/CVE-2025-45466 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-45466 · Security Note
• https://twitter.com/cracbot/status/1950511763889234235 · Twitter Post
• https://twitter.com/CVEnew/status/1948782126893334718 · Twitter Post
• https://unitree.com/cn/go1 · Note