importantSYS.SOURCE: The Hacker News• 2026-08-28T17:37:24+05:30

Two Critical Root RCE Vulnerabilities in Unitree G1 EDU Humanoid Robots

#vulnerability #iot security #bluetooth #rce #robotics

Security researcher Olivier Laflamme disclosed two independent root remote code execution (RCE) vulnerabilities in the Unitree G1 EDU humanoid robot, one via Bluetooth Low Energy (BLE) and another through a network-adjacent path. No confirmed firmware fixes have been released for CVE-2026-76639 and CVE-2026-76640, leaving users vulnerable to potential exploitation.

Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot's Locomotion PC.

The flaws are tracked as CVE-2026-76639 and CVE-2026-76640, with the first involving a network-adjacent path through chat_go and bashrunner and the

Read original article

*** END OF TRANSMISSION ***

> SWEDEN'S STRATEGIC GROWTH IN BUILDING A THRIVING STARTUP ECOSYSTEM > ATTIMET (YC F24) TECHNICAL STAFF HIRING: ENGINEERING AND RESEARCH ROLES > RUMORS OF SECURITY VULNERABILITIES ENABLE RAPID EXPLOIT DEVELOPMENT IN OPEN SOURCE > SURVEY REVEALS MAJORITY OF AMERICANS OPPOSE POLICE LICENSE PLATE SURVEILLANCE CAMERAS > DACTYL'S CROSS-PLATFORM SWIFTUI RENDERER ARCHITECTURE AND DEVELOPMENT PROCESS > RETRO APP SECURES $21M IN SERIES A FUNDING TO ENHANCE FRIEND-CENTRIC PHOTO SHARING > 19 CHROME AND EDGE EXTENSIONS DISCOVERED WITH MALICIOUS WALLET-STEALING AND CRYPTO-DRAINING CODE > RUNNING QWEN3.8 27B LOCALLY ON MAC STUDIO: PERFORMANCE METRICS AND QUANTIZATION ANALYSIS > CHINA WARNS OF PERSISTENT FLOOD RISK FROM NEPAL-CHINA BORDER BARRIER LAKE > Z.AI RELEASES OPEN-WEIGHT GLM-5.3 FOR AGENTIC CODING AND CYBER DEFENSE> SWEDEN'S STRATEGIC GROWTH IN BUILDING A THRIVING STARTUP ECOSYSTEM > ATTIMET (YC F24) TECHNICAL STAFF HIRING: ENGINEERING AND RESEARCH ROLES > RUMORS OF SECURITY VULNERABILITIES ENABLE RAPID EXPLOIT DEVELOPMENT IN OPEN SOURCE > SURVEY REVEALS MAJORITY OF AMERICANS OPPOSE POLICE LICENSE PLATE SURVEILLANCE CAMERAS > DACTYL'S CROSS-PLATFORM SWIFTUI RENDERER ARCHITECTURE AND DEVELOPMENT PROCESS > RETRO APP SECURES $21M IN SERIES A FUNDING TO ENHANCE FRIEND-CENTRIC PHOTO SHARING > 19 CHROME AND EDGE EXTENSIONS DISCOVERED WITH MALICIOUS WALLET-STEALING AND CRYPTO-DRAINING CODE > RUNNING QWEN3.8 27B LOCALLY ON MAC STUDIO: PERFORMANCE METRICS AND QUANTIZATION ANALYSIS > CHINA WARNS OF PERSISTENT FLOOD RISK FROM NEPAL-CHINA BORDER BARRIER LAKE > Z.AI RELEASES OPEN-WEIGHT GLM-5.3 FOR AGENTIC CODING AND CYBER DEFENSE