Mmastodon Technology Robotics first seen 2 d ago, last 1 d ago, peak #4

Critical command injection flaw disclosed in Unitree Go2 robot dog

Original: CVE-2026-115995 (CRITICAL, CVSS 9.4): OS command injection in Unitree Go2 (1.1.11.0 – 1.1.11.4) enables remote code exec

A critical vulnerability, tracked as CVE-2026-115995 with a CVSS score of 9.4, has been disclosed in the Unitree Go2 quadruped robot. The flaw is an OS command injection in the set_volume function of chat_go, affecting firmware versions 1.1.11.0 through 1.1.11.4, and allows remote code execution. Users are advised to upgrade to firmware 1.1.11.5 to remediate the issue.

Why now: A newly disclosed critical remote code execution flaw in a popular consumer robot dog raises immediate security concerns for owners and operators.

Unitree Unitree Go2 CVE-2026-115995

Open on mastodon →

Rank over time, top of the chart is #1. 17 snapshots from 2 d ago to 1 d ago.

Evidence

CVE-2026-115995 (CRITICAL, CVSS 9.4): OS command injection in Unitree Go2 (1.1.11.0 – 1.1.11.4) enables remote code execution via set_volume in chat_go. Upgrade to 1.1.11.5 to remediate. https:// radar.offseq.com/threat/cve-20… · offseq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/3548627