A critical vulnerability has been found in the Unitree Robotics Unitree Go2 robot dog, tracked as CVE-2026-115995. The flaw affects the set_volume function in the file gpt_thread.py, part of the chat_go component, in versions up to 1.1.11.4. Manipulating the Value argument with crafted input leads to operating-system command injection, classified as CWE-78, which can allow a remote attacker to execute arbitrary commands with the privileges of the process running the component.

The vulnerability carries a CVSS v3.1 base score of 9.6 in the OffSeq assessment, and 9.4 under CVSS v4.0 in the ThreatRoundup assessment, both in the critical range. The attack can be launched remotely, requires no privileges, but does require some user interaction, according to the CVE record. The vendor confirmed the issue early, saying submission 990502 corresponds to its internal ticket 474, covering the Go2 chat_go set_volume command injection.

What owners should do

Upgrading to version 1.1.11.5 eliminates the vulnerability, according to VulDB and OffSeq. Owners should check their Go2 firmware version, apply the vendor's 1.1.11.5 update, and avoid exposing the robot's services directly to the internet while unpatched. No public exploit code has been reported in public exploit databases, and the flaw is not on CISA's Known Exploited Vulnerabilities list, but the combination of remote reach and full system impact makes patching a priority, not a routine update.

The case is a reminder that consumer and research robots are networked computers with motors attached: a flaw in a chat feature can become a route to full control of the machine. Owners who cannot update immediately should isolate the robot from untrusted networks and check the vendor's advisory for mitigations. Sources: VulDB and OffSeq Threat Radar.