← Back

CVE-2025-2894

nvd nist
Published: Mar 28, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.6
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.7 / Impact: 5.9
Source: cve@takeonme.org (Secondary)

Description

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service.

Affected (1)

Unitree
1 product
Go1 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Go1 Firmware
All versions
Running on/withPlatform Versions
Unitree
Go1
All versions

Related CWEs

CWE-912
Hidden Functionality
The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

References (5)

Source: cve@takeonme.org
ExploitThird Party Advisory
Source: cve@takeonme.org
Issue TrackingThird Party Advisory
Source: cve@takeonme.org
ExploitMitigationThird Party Advisory
Source: cve@takeonme.org
Press/Media Coverage
Source: cve@takeonme.org
Press/Media Coverage

Timeline

No history available yet.