What is the CVSS score of CVE-2026-1442?

CVE-2026-1442 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Is there a public PoC exploit available for CVE-2026-1442?

Yes, a public proof-of-concept exploit is available for CVE-2026-1442. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-1442?

Within 24 hours: Inventory all Unitree devices in your environment and isolate them from critical networks if possible. Within 7 days: Restrict physical access to Unitree devices, disable remote firmware update capabilities if supported, and implement network segmentation to limit lateral movement if a device is compromised. Within 30 days: Establish a vendor communication channel with Unitree for patch timelines, evaluate alternative robotic platforms, and implement enhanced monitoring/logging on affected devices to detect unauthorized firmware modifications.

Go1 Air Firmware CVE-2026-1442

HIGH

Use of Hard-coded Cryptographic Key (CWE-321)

2026-02-27 cve@takeonme.org

Authentication Bypass Go1 Air Firmware Go1 Pro Firmware Go2 Air Firmware Go2 Edu Plus Firmware Go2 Edu Standard Firmware Go2 Pro Firmware Go2 X Firmware Unitree

7.8

CVSS 3.1 · NVD

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Obtain firmware update file
Delivery

Extract encryption key from publicly available material
Exploit

Decrypt and modify firmware payload
Execution

Re-encrypt with compromised key
Persist

Deliver modified firmware to Unitree device
Impact

Execute arbitrary code on robot

Vulnerability Assessment

Weakness	CWE CWE-321 OWASP Top 10:2025 A04:2025 - Cryptographic Failures ASVS 5.0 V11 - Cryptography Key management, no hard-coded keys
Exploitation Conditions	Local access to firmware update files or update delivery mechanism; attacker must have obtained the encryption key material used by Unitree's firmware generation process, which is reportedly available to attackers; user interaction required to initiate firmware update on Unitree Go2 or other affected Unitree robot models.
Impact	CVSS 7.8 (HIGH). Attack vector: Local. Complexity: Low. Privileges required: None. User interaction: Required. Exploitation no authentication required. Public exploit/POC available.
Exploit ScenarioDerived	An attacker without authentication could exploit this vulnerability to compromise the affected system.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Unitree robotics firmware updates can be modified and executed by local attackers due to inadequate encryption of the firmware protection mechanism, allowing arbitrary code execution on affected Go1 and Go2 models. Public exploit code exists for this vulnerability, and no patch is currently available. An attacker with physical or local access could tamper with firmware packages to gain complete control over the device.

Earlier versions of this analysis (1)

v1 Mar 12, 2026 - 21:55 CVSS 7.8

Go2 Edu Standard Firmware versions up to - is affected by use of hard-coded cryptographic key (CVSS 7.8).

RemediationAI

Monitor vendor advisories for a patch.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

This vulnerability (CWE-321: Use of Hard-coded Cryptographic Key) affects Go2 Edu Standard Firmware. Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, such as the Unitree Go2 and other models. This issue appears to affect all of Unitree’s current offerings as of February 26, 2026, and so should be considered a vulnerability in both the firmware generation and extraction processes. At the ti

Know when Go1 Air Firmware gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Mar 11, 2026 - 19:40 vuln.today

Public exploit code

CVE Published

Feb 27, 2026 - 05:18 nvd

HIGH 7.8

DescriptionCVE.org

Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, such as the Unitree Go2 and other models. This issue appears to affect all of Unitree’s current offerings as of February 26, 2026, and so should be considered a vulnerability in both the firmware generation and extraction processes. At the time of this release, there is no publicly-documented mechanism to subvert the update process and insert poisoned firmware packages without the equipment owner’s knowledge.

Executive ViewAI

Why It Matters

All Unitree robotic products (Go2 and others) are vulnerable to unauthorized firmware modification due to weak encryption key management, allowing attackers to inject malicious code that will be trusted by the devices. This affects any organization deploying Unitree robots in production environments and represents a critical supply chain risk with active public exploits available.

Business Impact: High

Compensating Controls

Disable automatic firmware update mechanisms; implement strict network segmentation isolating Unitree devices to dedicated VLANs with no access to sensitive systems; enforce physical access controls to prevent unauthorized device tampering; deploy network intrusion detection signatures to monitor for firmware modification attempts; require manual firmware verification procedures with cryptographic validation by trusted administrators before any updates are applied; consider suspending deployment of new Unitree devices until vendor patches are available.

Threat Intelligence Overview

EPSS Score

0.0%

Top 98% exploitable

Exploit

POC

Public exploit code exists

Data Quality

4 sources

Confidence: Medium

NVD

CVE.org

EPSS

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC Yes

EPSS 0.0%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.