What is the CVSS score of CVE-2026-1442?

CVE-2026-1442 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Go1 Air Firmware are affected by CVE-2026-1442?

All Unitree robotic products (Go2 and others) are vulnerable to unauthorized firmware modification due to weak encryption key management, allowing attackers to inject malicious code that will be…

Is there a public PoC exploit available for CVE-2026-1442?

Yes, a public proof-of-concept exploit is available for CVE-2026-1442. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-1442?

Within 24 hours: Inventory all Unitree devices in your environment and isolate them from critical networks if possible. Within 7 days: Restrict physical access to Unitree devices, disable remote firmware update capabilities if supported, and implement network segmentation to limit lateral movement if a device is compromised. Within 30 days: Establish a vendor communication channel with Unitree for patch timelines, evaluate alternative robotic platforms, and implement enhanced monitoring/logging on affected devices to detect unauthorized firmware modifications.

Go1 Air Firmware CVE-2026-1442

HIGH

Use of Hard-coded Cryptographic Key (CWE-321)

2026-02-27 cve@takeonme.org

Authentication Bypass Go1 Air Firmware Go1 Pro Firmware Go2 Air Firmware Go2 Edu Plus Firmware Go2 Edu Standard Firmware Go2 Pro Firmware Go2 X Firmware Unitree

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Mar 11, 2026 - 19:40 vuln.today

Public exploit code

CVE Published

Feb 27, 2026 - 05:18 nvd

HIGH 7.8

DescriptionCVE.org

Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, such as the Unitree Go2 and other models. This issue appears to affect all of Unitree’s current offerings as of February 26, 2026, and so should be considered a vulnerability in both the firmware generation and extraction processes. At the time of this release, there is no publicly-documented mechanism to subvert the update process and insert poisoned firmware packages without the equipment owner’s knowledge.

AnalysisAI

Unitree robotics firmware updates can be modified and executed by local attackers due to inadequate encryption of the firmware protection mechanism, allowing arbitrary code execution on affected Go1 and Go2 models. Public exploit code exists for this vulnerability, and no patch is currently available. An attacker with physical or local access could tamper with firmware packages to gain complete control over the device.

Technical ContextAI

This vulnerability (CWE-321: Use of Hard-coded Cryptographic Key) affects Go2 Edu Standard Firmware. Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying attention), the firmware updates may be altered by an unauthorized user, and then trusted by a Unitree product, such as the Unitree Go2 and other models. This issue appears to affect all of Unitree’s current offerings as of February 26, 2026, and so should be considered a vulnerability in both the firmware generation and extraction processes. At the ti