Public disclosure
Reported by Andreas Makris, Kevin Finisterre, and Konstantin Severov (credited in UniPwn).
Security advisory
Unitree G1 and H1 Wi-Fi configuration command injection
The CNA identifies an OS command-injection weakness in Unitree Wi-Fi configuration and names G1 and H1. Its structured affected range lists G1 firmware through 1.4.4; no H1 firmware range is given. The CNA treats this as distinct from CVE-2025-60017.
Records last verified Oct 13, 2026 · Send a correction
- CVE IDs
- CVE-2025-35027
- Class
- Command Injection
- CVSS / assessor
- 7.3 · CVSS 3.1 · Austin Hackers Anonymous CNA
- Vendor response
- Acknowledged
Affected models, versions and components
- Unitree G1
Firmware through 1.4.4
Component: BLE Wi-Fi provisioning / wpa_supplicant restart
- Unitree H1
Affected versions not stated
Component: BLE Wi-Fi provisioning / wpa_supplicant restart
Disclosure and response timeline
The record has one response or remediation date. It does not supply separate dates for every vendor communication and fix.
Vendor response / remediation update (as recorded)
Acknowledged. Unitree reported distributing OTA fixes on September 29. AHA reported on October 7 that recent updates did not address this CVE. No fixed version is identified.
Fix
Separate fix date not recorded
No fixed version identified in the recorded sources.
What owners should do
Follow Unitree's OTA update notices.
Fixed version (as stated): No fixed version identified.
Unitree reported distributing OTA fixes on September 29. AHA reported on October 7 that recent updates did not address this CVE. No fixed version is identified.
How to read this ledger
We include official CVE records, vendor advisories, CERT/CISA notices and researchers’ own disclosures. CVSS is attributed to its published assessor, including the named CVE Numbering Authority (CNA), with the version from the recorded vector. A CNA score is not an NVD assessment. An unpublished score stays unknown.
Affected versions, variants, component scope and fix qualifications retain the disclosure’s wording. A reported patch is not an independent retest. Disputed findings show the researcher and vendor positions together. We publish no exploit instructions or payloads.
Counts describe curated advisory records; several records may come from one disclosure. Coverage is incomplete and is not a security ranking. An absent record does not establish that a robot has no vulnerabilities.
Evidence
Sources
- [s1] CVE-2025-35027 — CVE Program record ↗
CVE Program / Austin Hackers Anonymous CNA · database · published Sep 26, 2025 · accessed Oct 13, 2026
- [s2] Unitree Robot BLE Service Command Injection Analysis ↗
Andreas Makris, Kevin Finisterre, and Konstantin Severov · other · published Sep 20, 2025 · accessed Oct 13, 2026
- [s3] Statement to our respected Unitree users ↗
Unitree Robotics · official · published Sep 29, 2025 · accessed Oct 13, 2026
- [s4] CVE-2025-35027: Unitree Robotics command injection advisory ↗
Austin Hackers Anonymous · other · published Sep 26, 2025 · accessed Oct 13, 2026
- [s5] Unitree reply about OTA security fixes ↗
Unitree Robotics · official · published Sep 29, 2025 · accessed Oct 13, 2026
Other advisory records
- Unitree G1 EDU BLE provisioning and buffer handling allow root code execution →
- Unitree G1 EDU remote code execution through DDS bridge and file upload →
- Unitree UPK firmware-update format uses hardcoded cryptographic keys →
- Unitree G1 and H1 access-point configuration command injection →
- Unitree G1 and H1 BLE provisioning handshake authentication bypass →
- Unitree G1 and H1 BLE provisioning uses shared cryptographic secrets →
- Unitree G1 telemetry privacy findings disputed by the manufacturer →
Trackers
Task evidence →
Source statements, stated autonomy and demonstration conditions.
Deployments →
Customers, tasks, contracts and evidence grades.
Timelines →
Dated maker claims, targets and sourced outcomes.
Policy →
Market access, legislation and standards in context.
How many robots →
Estimates, definitions, capacity and forecasts.