#Robotics
All CosmicBytez Labs articles tagged #Robotics, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-115995: OS Command Injection in Unitree Go2 Robot chat_go Component
A remotely exploitable OS command injection in Unitree Go2's set_volume function (versions up to 1.1.11.4) carries a CVSS score of 9.6.
- News
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE — One Starts Over Bluetooth
Researcher discloses two root RCE chains in the Unitree G1 EDU robot; one is a wormable, unauthenticated Bluetooth exploit reaching root remotely.
- News
As Global Powers Explore Humanoid Robots, Cyber-Risk Looms
Nation-states are racing to dominate the embodied AI and humanoid robotics market, but as governments and militaries integrate these systems, the…
- Security
CVE-2026-8153: Universal Robots PolyScope OS Command
A critical OS command injection flaw in Universal Robots PolyScope Dashboard Server (CVSS 9.8) allows unauthenticated attackers to execute arbitrary...
- News
Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE
Cybersecurity researchers have disclosed CVE-2026-25874, a critical unauthenticated remote code execution vulnerability (CVSS 9.3) in Hugging Face's...