CVE-2025-2894

Concrete details exist for CVE-2025-2894 in connected docs: Unitree Go1 family robots (Go2, G1, H1, B2) expose a BLE Wi‑Fi configuration interface with a hardcoded AES-CFB128 key and IV, enabling an authentication bypass (

CVE-2025-45466

CVE-2025-45466 affects Unitree Go1 (and Go1_2022_05_11 and older) due to hardcoded plaintext credentials causing an Improper Access Control vulnerability. The issue enables network-based access with no user interaction, requiring low privileges and low attack complexity; the impact is high confid...

CVE-2025-45467

CVE-2025-45467 affects Unitree Go1 firmware (Go1_2022_05_11 and earlier). The vulnerability is an insecure firmware verification mechanism in the update process (via Wi‑Fi/Ethernet) that relies solely on MD5 checksums, enabling potential tampering of the official firmware. Reported impacts includ...