
- UniPwn exploits Unitree robots, allowing remote root access via network services
- The vulnerability combines hardcoded keys, weak handshakes, and unsafe command execution
- Compromised devices could attempt lateral movement across nearby robots over wireless links
Security researchers Bin4ry and d0tslash have published a write-up on GitHub about an exploit named "UniPwn" which affects multiple Unitree product lines.