CVE-2025-60250

MEDIUM

4.7

CVSS Score

Published: September 26, 2025 at 12:00 AM UTC

Updated: October 18, 2026 at 09:10 PM UTC

4 products affected across 1 vendorGo2B2G1

Using Go2 by Unitree?

Get instant alerts when new vulnerabilities affect Go2 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.7

Exploit prediction

EPSS 0.2%

SSVC

PoC

Description

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

B2 · Unitree

90%

0 ≤ v ≤ 2025-09-200

G1 · Unitree

90%

0 ≤ v ≤ 2025-09-200

Go2 · Unitree

90%

0 ≤ v ≤ 2025-09-200

H1 · Unitree

90%

0 ≤ v ≤ 2025-09-200

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (3)

Source: cverecord

https://spectrum.ieee.org/unitree-robot-exploit

Source: cverecord

https://github.com/Bin4ry/UniPwn

Source: cverecord

https://news.ycombinator.com/item?id=45381590

SSVC — Action Prioritization

SSVCPoCNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

4.7MEDIUMmitre

Vector?

Quick Info

StatusDEFERRED

CWE

CWE-321

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card