CVE-2026-27509

Katalog CVE

CVSS 8.0 · High EPSS 0,44%

Kerentanan Missing Authentication for Critical Function pada unitree go2 firmware, unitree go2 edu firmware. Skor CVSS 3.1 8.0 (High) menurut vulncheck.com.

Deskripsi (NVD)

Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager.py. A network-adjacent, unauthenticated attacker can join DDS domain 0 and publish a crafted message (api_id=1002) containing arbitrary Python, which the robot writes to disk under /unitree/etc/programming/ and binds to a physical controller keybinding. When the keybinding is pressed, the code executes as root and the binding persists across reboots.

Rincian

Terbit di NVD

26 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.0 (High), sumber vulncheck.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://boschko.ca/unitree-go2-rce/ exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/unitree-go2-missing-dds-authentication-enables-adjacent-rce advisory pihak ketiga
• https://shop.unitree.com/products/unitree-go2 product