home.social

#rootrce — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #rootrce, aggregated by home.social.

  1. Two independent root RCE chains were disclosed on the Unitree G1 EDU humanoid robot. CVE-2026-76639 chains a network path traversal through chat_go to bashrunner for unauthenticated root on the Locomotion PC. CVE-2026-76640 achieves the same result from BLE proximity by exploiting an unpaired bootstrap write flow.

    #UnitreeG1 #RootRCE #BLE #RoboticsSecurity

    cyberworldops.eu/en/two-root-a