External risk intelligence

Unitree Go2 `chat_go` OS Command Injection

CVE advisorySeverity: CRITICAL (CVSS 9.4)

CVE-2026-115995

The vulnerability affects a component within a robotics platform (Unitree Go2). While the attack can be launched remotely, these devices are typically intended for local operation, research, or private environments. Public internet exposure of a robot's internal chat/voice management functions is uncommon, making direct internet-reachable exploitation unlikely in standard deployment scenarios.

OS Command Injection

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical security vulnerability has been identified in Unitree Robotics Go2 robots, specifically within the chat functionality. This flaw allows for remote command execution by manipulating a specific function, potentially leading to unauthorized control or access. The primary concern is to confirm if this technology is deployed within your environment and assess any potential exposure.

Allows remote attackers to inject commands.
Understands critical system access risk.
Confirm relevance and assess potential exposure.

Attack Path

How an attacker could exploit the issue

An attacker can remotely exploit this vulnerability by targeting the `set_volume` function within the `chat_go` component. By providing specially crafted input to the `Value` argument, an attacker can inject operating system commands, potentially leading to unauthorized system control and data compromise.

Attackers need network access.
Triggered by manipulating a volume setting.
Leads to OS command injection.

Live Threat

Current exploitation, exposure, and threat context

When supported by the advisory, remote attackers could manipulate the `set_volume` function in the `chat_go` component to inject operating system commands. This could affect the robot's service behavior and potentially sensitive information stored or processed by the affected system.

Robot's service behavior.
Via remote command injection.
Potential unauthorized system control.

Operational Fix

Recommended remediation, mitigation, and detection steps

This critical vulnerability in the Unitree Go2's `chat_go` component likely falls under the responsibility of the system owner or application owner responsible for the robot's functionality. The first practical move is to identify all deployed Unitree Go2 robots, confirm their network accessibility, and assess their criticality to operations before planning the upgrade.

Identify responsible system/application owners.
Verify robot network exposure and criticality.
Plan and execute the vendor-provided upgrade.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the Unitree Go2 robot and the chat_go component?

The Unitree Go2 is an advanced quadrupedal robot designed for research, industrial inspection, or personal use. It features various software modules to handle interactions. The chat_go component is a specific software element on the robot responsible for managing conversational or voice-related functions, such as audio volume control, which is the specific area affected by this vulnerability.

What does OS command injection mean for CVE-2026-115995?

This vulnerability is classified as CWE-78 (OS Command Injection). It means that an attacker can feed malicious input into the system that the software then inadvertently runs as a direct command on the robot's operating system. Instead of just adjusting a volume setting as expected, the system executes unauthorized code, granting the attacker control over the device's functions.

How is this vulnerability triggered?

The flaw is triggered when an attacker sends specially crafted data to the set_volume function within the chat_go component. The system fails to sanitize the input properly, allowing the injected commands to execute. It is important to note that simply using the robot for standard movement or routine operations does not trigger this; the trigger requires targeted interaction with the vulnerable volume-setting function.

Is my robot at risk according to Halo Surface Signal?

Halo Surface Signal indicates that exploitation is unlikely for most users. Because the Unitree Go2 is typically used in private or research settings, these robots are rarely exposed directly to the public internet. While remote attacks are theoretically possible, they generally require the robot's internal management functions to be reachable from an untrusted network, which is uncommon in standard setups.

What is the first step to remediate this vulnerability?

The most effective way to address this is to upgrade your robot's firmware to version 1.1.11.5. Before applying the update, verify your inventory to locate all deployed Go2 units and assess their current network connectivity. Prioritizing those with wider network access can help manage your risk while you prepare to roll out the vendor-provided patch across your fleet.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.