Unitree Go2

Published research documented unauthenticated remote command execution paths accessible via Go2’s Wi-Fi interface. The vulnerabilities allowed an attacker on the same network segment to send movement commands to the robot without valid credentials. The research covered the Go2 firmware version available at time of disclosure; specific version numbers were referenced in the original research but are not reproduced here to avoid fabrication of version strings.

Go2’s developer-accessible Wi-Fi API, designed to enable SDK connectivity, was identified as the primary attack surface. The open architecture that makes Go2 valuable for research and custom integration also means authentication controls on that interface are critical. Researchers demonstrated movement command injection; potential for sensor data interception was noted as an additional risk vector.

Unitree acknowledged the security findings. A patched firmware with documented remediation of the specific vulnerabilities was not confirmed as shipped within the reporting window following the disclosure. Operators should verify current firmware release notes against the disclosed vulnerability identifiers before field deployment.

Network isolation on a dedicated SSID or VLAN, not shared with other devices or users, reduces exposure. Remote operation over public or semi-public networks should be suspended pending confirmed patch deployment.