Episode Details

Security researcher Olivier Laflamme published two CVEs on August 27 showing that a person within Bluetooth range of a Unitree G1 humanoid — no pairing, no password — can gain root control of the computer that runs its motors, cameras, microphones and collision detection. The decisive flaw was an authorization check Unitree's cloud never performed, and a compromised robot can attack other robots nearby. It lands a month after the FCC put foreign advanced robotic devices on its Covered List, a rule that blocks new models from authorization but explicitly leaves already-authorized robots free to be imported, sold and used.

Continue the story on unscarcity.ai:

• Humanoid Robots 2026: 50,000 Units and a US Import Ban
• Blocklists Fail When Machines Write the Unknown

Full episode notes on unscarcity.ai