Unitree Go2: OS command injection in chat_go voice assistant
Summary
Unitree Go2 firmware up to 1.1.11.4 contains an OS command injection flaw in the set_volume function of gpt_thread.py in the chat_go component. A remote attacker can supply a manipulated Value argument to execute operating system commands on the robot, which may lead to full compromise of confidentiality, integrity and availability. No privileges are required, but user interaction is assumed according to the CVSS vector. Whether the component is reachable from a typical SME network is unknown.
Affected
- Unitree Go2 firmware 1.1.11.0 through 1.1.11.4
- Unknown whether earlier firmware builds are affected; a VulDB submission title cites older versions (1.1.4, 1.1.7, 1.1.7.2) that need verification against Unitree release notes
Fixed in
- Firmware 1.1.11.5 (listed as unaffected by CNA data and recommended by VulDB)
- Unitree advisory: Unknown. Fixed-version information is not confirmed by the vendor.
Workaround
- No vendor workaround known.
- Keep the robot off direct internet exposure and restrict network access to it until patched.
- Disable the chat_go voice function if it is not needed.
Exploitation
- VulDB states no public exploit is available; CISA SSVC lists exploitation as PoC.
- Not listed as actively exploited in the CISA KEV catalog according to a third-party source; not verified directly.
- Automatable: no (CISA SSVC).
Our recommendation
- Identify all Unitree Go2 units and their firmware versions.
- Upgrade affected units to 1.1.11.5 after verifying the package against Unitree release notes.
- Remove direct internet exposure and limit network access to the robot.
- Disable the chat_go voice function if it is not required.
- Monitor for unusual commands or network connections from the robot.
- Priority is high for any networked Go2 running firmware up to 1.1.11.4.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulDB CVE-2026-115995 vuldb.com
- VulDB entry 426093 vuldb.com
- VulDB submission 990502 vuldb.com
- Vulners CVE record (CNA data) vulners.com
- Unitree firmware package 1.1.11.5 unitree-firmware.oss-cn-hangzhou.aliyuncs.com
- Strix CVE-2026-115995 www.strix.ai
- CVE record aggregator (CWE data) cve.threatint.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 23:51.
Original description (NVD)
A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely. Upgrading to version 1.1.11.5 is sufficient to resolve this issue. You should upgrade the affected component. The vendor confirmed early: "Submission 990502 corresponds to our internal ticket #474 (Go2 chat_go set_volume OS command injection, CWE-78)."
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.