The firmware of Unitree G1 EDU robots up to version 1.5.2 contains a chain of two critical weaknesses: an unquoted heredoc variable in the Wi‑Fi provisioning script and a buffer overflow in the BLE GATT server. An attacker that can communicate with the device over BLE or the Wi‑Fi provisioning channel can craft payloads that overwrite internal buffers, corrupt a function pointer in the main loop, and force the cleanup routine to invoke system() with attacker‑supplied arguments as the root user. The result is unrestricted root code execution, giving full control over the robot’s operating system.

The affected product is Unitree Robotics G1 EDU running firmware 1.5.2 or earlier. All devices that have not applied the latest firmware are vulnerable.

The CVSS score of 7.7 indicates a high‑severity flaw. EPSS is unavailable, so the current exploitation probability cannot be quantified, but the vulnerability is unauthenticated and only requires proximity over BLE or the Wi‑Fi provisioning channel, making it realistic for attackers who can physically approach the robot. The lack of a KEV listing does not reduce the risk; the flaw can be exploited via crafted BLE writes that overflow a static BSS buffer, corrupt a dispatch entry, and trigger a system() call with root privileges. Attackers would need to discover the specific BLE service and characteristics used by the GATT server, but detailed information is publicly available in the linked advisories.