CVE-2026-115995: Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection
A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function setvolume of the file gptthread.py of the component chatgo. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely. Upgrading to version 1.1.11.5 is sufficient to resolve this issue. You should upgrade the affected component. The vendor confirmed early: "Submission 990502 corresponds to our internal ticket #474 (Go2 chatgo setvolume OS command injection, CWE-78)."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Unitree Robotics Unitree Go2to a version that resolves this vulnerability.Fixed in 1.1.11.5
Event History
Frequently Asked Questions
Which deployments are affected?
Unitree Go2 devices running versions up to 1.1.11.4 are affected when using the chat_go component containing gpt_thread.py. Version 1.1.11.5 resolves the issue.
What access does an attacker need to exploit this?
The attack can be launched remotely, and the supplied severity vector indicates no privileges are required. Exploitation requires interaction from a user, as reflected by the UI:R metric.
What is the recommended remediation?
Upgrade the affected Unitree Go2 chat_go component to version 1.1.11.5 or later. The vendor confirmed the issue under internal ticket #474.