A robot conversational interface can translate a volume-adjustment request into an operating-system command. The reported bug treats a value intended to be data as part of a shell command, so malformed inputs can have effects outside speaker-volume control. This is an application parser boundary in a robot agent path, not a model-generated movement plan. Th…
Inspect the ClaimsCase · DiggingBeagle record
Unitree Go2 chat volume parameter could cross into shell execution
CVE-2026-115995 describes shell-command injection through a Go2 chat_go set_volume value; the advisory lists firmware fix 1.1.11.5. A deployed robot takeover or motion-control exploit has not been independently documented.
Scope
The listing is an advisory rather than an independently observed intrusion; callers, firmware variation, process identity, and any ability to affect locomotion are not fully established.
Assessment profile
Assessment method- Setting
- research demonstration
- Exploitation
- not established
- Evidence
- Grade B
- Remediation
- patch available
- AI role
- AGAINST AI
Basis and provenance
Enrich update: CLM-ENRICH-20261027-37 cites SRC-2026-CP21-UNITREE-GO2-VOLUME-COMMAND at CVE-2026-115995, description and vendor ticket 474. New evidence concerns the bounded reported mechanism, prerequisite or outcome; setting research_demonstration; exploit status not_established; remediation status patch_available. No independently comparable impact scale, affected production population or universal exploit success measure was established, so the impact band remains null. Original Claims remain individually attributable and any observed incident or simulated result is distinguished in the narrative.
Assessed Oct 27, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-ENRICH-20261027-37 · Unitree Go2 CVE-2026-115995 advisory: chat_go set_volume command injection
At a glance
Language-driven physical interfaces need to keep user-facing slot values separate from process control and actuator permission.
Read the implicationsThe listing is an advisory rather than an independently observed intrusion; callers, firmware variation, process identity, and any ability to affect locomotion are not fully established.
Limits and uncertaintyFull account
A robot conversational interface can translate a volume-adjustment request into an operating-system command. The reported bug treats a value intended to be data as part of a shell command, so malformed inputs can have effects outside speaker-volume control. This is an application parser boundary in a robot agent path, not a model-generated movement plan.
The GitHub advisory describes attacker-influenced set_volume values reaching a shell in the Go2 chat software, lists affected releases up to 1.1.11.4 and names 1.1.11.5 as fixed. The listing is an advisory rather than an independently observed intrusion; callers, firmware variation, process identity, and any ability to affect locomotion are not fully established.
Update to verified fixed firmware and invoke volume control through fixed APIs or argument arrays with bounded integer input, not through a shell-interpolated string. Language-driven physical interfaces need to keep user-facing slot values separate from process control and actuator permission. Primary evidence.
Additional evidence and trust boundary
A volume instruction is legitimate data, not authority to construct arbitrary shell text. The danger occurs when the chat-oriented command adapter interpolates that value into an operating-system command executed under the robot's software privileges. Upgrade the reported software branch and inspect the actual command-construction path. The advisory does not establish an observed autonomous movement attack or a production victim. Supporting record.
Mechanism and trust boundary
- 01
Step
- 02
Step
- 03
Step
Timeline
- Oct 24, 2026disclosure
Public disclosure
Claims & evidence
CLM-ENRICH-20261027-37The Unitree Go2 advisory attributes OS command injection to the chat_go gpt_thread.py set_volume Value argument, lists releases through 1.1.11.4 as affected, and identifies 1.1.11.5 as the vendor fix.supported
Basis: reported finding
- supportsUnitree Go2 CVE-2026-115995 advisory: chat_go set_volume command injectionprimary disclosure
CVE-2026-115995, description and vendor ticket 474
CLM-CP21-UNITREE-GO2-VOLUME-COMMAND-1The GitHub advisory describes attacker-influenced set_volume values reaching a shell in the Go2 chat software, lists affected releases up to 1.1.11.4 and names 1.1.11.5 as fixed.supported
Basis: reported finding
- supportsUnitree Go2 CVE-2026-115995 advisory: chat_go set_volume command injectionprimary disclosure
CVE-2026-115995 description, chat_go/gpt_thread.py set_volume path and patched versions
Implications
Language-driven physical interfaces need to keep user-facing slot values separate from process control and actuator permission.
Controls and mitigations
- Update to verified fixed firmware and invoke volume control through fixed APIs or argument arrays with bounded integer input, not through a shell-interpolated string.
Unknowns and contradictions
- The listing is an advisory rather than an independently observed intrusion; callers, firmware variation, process identity, and any ability to affect locomotion are not fully established.
Sources and citation
Material revision history
- Oct 27, 2026 · Canonical change recorded · new in release · revision 196