CVE-2026-115995

CRITICAL 9.6

Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection

CVSS Score

9.6

EPSS Score

0.0%

EPSS Percentile

0th

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely. Upgrading to version 1.1.11.5 is sufficient to resolve this issue. You should upgrade the affected component. The vendor confirmed early: "Submission 990502 corresponds to our internal ticket #474 (Go2 chat_go set_volume OS command injection, CWE-78)."

CWE	CWE-78 CWE-77
Vendor	unitree robotics
Product	unitree go2
Published	Oct 24, 2026

Stay Ahead of the Next One

Get instant alerts for unitree robotics unitree go2

Be the first to know when new critical vulnerabilities affecting unitree robotics unitree go2 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:X/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Unitree Robotics / Unitree Go2

1.1.11.0 1.1.11.1 1.1.11.2 1.1.11.3 1.1.11.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/426093 vuldb.com: https://vuldb.com/vuln/426093/cti vuldb.com: https://vuldb.com/cve/CVE-2026-115995 vuldb.com: https://vuldb.com/submit/990502 unitree-firmware.oss-cn-hangzhou.aliyuncs.com: https://unitree-firmware.oss-cn-hangzhou.aliyuncs.com/firmware/release/package_1.1.11.5_GO2_Edu_Max_Pro_X_1761128358872.upk

Credits

🔍 JasperXJY (VulDB User) VulDB CNA Team