Unitree Robot Bluetooth Flaw Enables Remote Takeover of Multiple Models
Security researchers disclosed a critical vulnerability in Unitree Robotics' Go2, B2, G1, and H1 robots that allows remote control via a hardcoded Bluetooth key. The flaw is self-propagating and can create an automated botnet of affected robots; Unitree reportedly ceased communicating with researchers after they contacted it in May 2025.
What happened
On 20 September 2025, security researchers disclosed a critical vulnerability in Unitree Robotics' Go2, B2, G1, and H1 robot models. The flaw exists in the low-energy Bluetooth (BLE) Wi-Fi configuration interface and allows attackers to gain full control of affected robots by using a hardcoded encryption key with the string 'unitree'.
The vulnerability is self-propagating across wireless networks, meaning affected robots can automatically infect other Unitree robots within Bluetooth range without user intervention, forming a botnet. Researcher Andreas Makris and Victor Mayoral-Vilches of Alias Robotics contacted Unitree in May 2025 about the flaw; Unitree ceased responding in July. The researchers publicly disclosed the vulnerability after unsuccessful remediation efforts.
Reported impact
Attackers exploiting the flaw could perform simple actions such as restarting machines, or more complex attacks including installing trojans and stealing data. The wormable nature of the vulnerability enables attackers to potentially control large numbers of robots simultaneously.
Nottinghamshire Police in the United Kingdom has been testing the vulnerable Go2 model. Researchers also found that telemetry data from Unitree robots flows to Chinese servers and may contain audio, video, and spatial data.
Index analysis
The flaw represents the first publicly disclosed major vulnerability in a commercial humanoid robot platform. Security researchers expressed concern that Unitree has not addressed previous disclosures responsibly, including a backdoor vulnerability in the Go1 model discovered by the same researchers.
Governance controls
Unitree did not respond to requests for comment from IEEE Spectrum as of publication. In the short term, users can mitigate exposure by connecting robots only to isolated Wi-Fi networks and disabling Bluetooth connectivity. Researchers recommend Unitree implement long-term security measures and establish more responsive communication with users and security researchers.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.