CVE-2025-2894CWE-912

Unitree Go1 Robot Dog Backdoor Control Channel

Medium · published March 28, 2025

CVSS v3.1
6.6
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00877 · 58.6th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2025-03-28T02:51Z
EPSS history
Timeline
  • 28 MAR 02:51Z
    Unitree Go1 Robot Dog Backdoor Control Channel
    cvelistv5