All vulnerabilities
CVE-2026-115995

Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection

Unitree Robotics Unitree Go2
Open in ThreatlineRecord JSON
CVSS
9.4Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published24 Oct 2026Updated 24 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Reports 7

2 outlets mention it. Reports are not confirmation; each links to its source.

Description

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely. Upgrading to version 1.1.11.5 is sufficient to resolve this issue. You should upgrade the affected component. The vendor confirmed early: "Submission 990502 corresponds to our internal ticket #474 (Go2 chat_go set_volume OS command injection, CWE-78)."

Text from CVE List

Affected versions 6

  • Unitree Go2affected: 1.1.11.0CVE List
  • Unitree Go2affected: 1.1.11.1CVE List
  • Unitree Go2affected: 1.1.11.2CVE List
  • Unitree Go2affected: 1.1.11.3CVE List
  • Unitree Go2affected: 1.1.11.4CVE List
  • Unitree Go2unaffected: 1.1.11.5CVE List

References 5