Public disclosure
Reported by Andreas Makris, Kevin Finisterre, and Konstantin Severov (credited in UniPwn).
Security advisory
Unitree G1 and H1 access-point configuration command injection
The CVE record reports root-level command injection in Unitree Wi-Fi access-point configuration. This is one of the separately cataloged weaknesses in the UniPwn disclosure. The CNA advisory for CVE-2025-35027 distinguishes the two command-injection code paths and notes imprecise wording in this record.
Records last verified Oct 13, 2026 · Send a correction
- CVE IDs
- CVE-2025-60017
- Class
- Command Injection
- CVSS / assessor
- 8.2 · CVSS 3.1 · MITRE CNA
- Vendor response
- Acknowledged
Affected models, versions and components
- Unitree G1
Devices through 2025-09-20; no numbered firmware range in the CVE record
Component: Wi-Fi access-point configuration / hostapd restart
- Unitree H1
Devices through 2025-09-20; no numbered firmware range in the CVE record
Component: Wi-Fi access-point configuration / hostapd restart
Disclosure and response timeline
The record has one response or remediation date. It does not supply separate dates for every vendor communication and fix.
Vendor response / remediation update (as recorded)
Acknowledged. Unitree reported distributing OTA fixes; no CVE-specific fixed release is identified.
Fix
Separate fix date not recorded
No fixed version identified in the recorded sources.
What owners should do
Follow Unitree's OTA update notices.
Fixed version (as stated): No fixed version identified.
Unitree reported distributing OTA fixes; no CVE-specific fixed release is identified.
How to read this ledger
We include official CVE records, vendor advisories, CERT/CISA notices and researchers’ own disclosures. CVSS is attributed to its published assessor, including the named CVE Numbering Authority (CNA), with the version from the recorded vector. A CNA score is not an NVD assessment. An unpublished score stays unknown.
Affected versions, variants, component scope and fix qualifications retain the disclosure’s wording. A reported patch is not an independent retest. Disputed findings show the researcher and vendor positions together. We publish no exploit instructions or payloads.
Counts describe curated advisory records; several records may come from one disclosure. Coverage is incomplete and is not a security ranking. An absent record does not establish that a robot has no vulnerabilities.
Evidence
Sources
- [s1] CVE-2025-60017 — CVE Program record ↗
CVE Program / MITRE CNA · database · published Sep 26, 2025 · accessed Oct 13, 2026
- [s2] Unitree Robot BLE Service Command Injection Analysis ↗
Andreas Makris, Kevin Finisterre, and Konstantin Severov · other · published Sep 20, 2025 · accessed Oct 13, 2026
- [s3] Statement to our respected Unitree users ↗
Unitree Robotics · official · published Sep 29, 2025 · accessed Oct 13, 2026
- [s4] CVE-2025-35027 advisory — related CVE-2025-60017 clarification ↗
Austin Hackers Anonymous · other · published Sep 26, 2025 · accessed Oct 13, 2026
- [s5] Unitree reply about OTA security fixes ↗
Unitree Robotics · official · published Sep 29, 2025 · accessed Oct 13, 2026
Other advisory records
- Unitree G1 EDU BLE provisioning and buffer handling allow root code execution →
- Unitree G1 EDU remote code execution through DDS bridge and file upload →
- Unitree UPK firmware-update format uses hardcoded cryptographic keys →
- Unitree G1 and H1 BLE provisioning handshake authentication bypass →
- Unitree G1 and H1 BLE provisioning uses shared cryptographic secrets →
- Unitree G1 and H1 Wi-Fi configuration command injection →
- Unitree G1 telemetry privacy findings disputed by the manufacturer →
Trackers
Task evidence →
Source statements, stated autonomy and demonstration conditions.
Deployments →
Customers, tasks, contracts and evidence grades.
Timelines →
Dated maker claims, targets and sourced outcomes.
Policy →
Market access, legislation and standards in context.
How many robots →
Estimates, definitions, capacity and forecasts.