Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-60017

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and resta

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mitre

Description

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restart_wifi_sta).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unitree Go2

Default version status: unknown

  • 0 to ≤ 2025-09-20affected

Unitree G1

Default version status: unknown

  • 0 to ≤ 2025-09-20affected

Unitree H1

Default version status: unknown

  • 0 to ≤ 2025-09-20affected

Unitree B2

Default version status: unknown

  • 0 to ≤ 2025-09-20affected

References