Improper Neutralization of Special Elements used in a Command ('Command Injection') (CWE-77)
OS command injection vulnerability in the set_volume function of the gpt_thread.py file in the chat_go component of Unitree Go2 up to version 1.1.11.4. The Value argument is not properly sanitized, allowing arbitrary OS command injection.
An unauthenticated attacker over the network with user interaction can inject and execute arbitrary OS commands on the affected Unitree Go2 robot, with the privileges of the application process.
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Yes, patch available in version 1.1.11.5
Upgrade Unitree Go2 to version 1.1.11.5 or later. Restrict network access to the affected component and implement network segmentation to limit exposure of the robot to untrusted networks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Feedly found the first article mentioning CVE-2026-115995 . See article
NVD published the first details for CVE-2026-115995
A CVSS base score of 9.6 has been assigned.
GitHub Advisories released a security advisory .
CVE-2026-116207: YesWiki Unauthenticated SQLi Exposes Database Credentials and Enables DoS
A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. (CVE-2026-115995)
Be the first to know critical vulnerabilities
Collect, analyze, and vulnerability reports faster using AI
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
