Entity · DiggingBeagle record
Unitree Go2
Quadruped robot platform with chat-oriented control software affected by a set_volume shell-injection advisory.
Record description
The Unitree Go2 is a quadruped robot with an optional chat-oriented software path. A documented October 2026 issue in chat_go gpt_thread.py concerns a value passed through set_volume that may enter an operating-system shell command. The recorded fixed branch is 1.1.11.5, and the disclosed failure is about the software command adapter, not evidence that a remote attacker moved a deployed robot or controlled every Go2 function. Vulnerability.