Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Security researcher Olivier Laflamme disclosed two separate root remote code execution vulnerabilities in the Unitree G1 EDU humanoid robot, including one exploitable via Bluetooth Low Energy. The flaws allow attackers to gain root access on the robot's Locomotion PC, with no confirmed firmware fix yet available.