CVE-2025-60250

MediumCVSS 4.7

Published: 26/09/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV.

Risk Assessment

An attacker within Bluetooth range can intercept and decrypt BLE communication, potentially leading to disclosure of sensitive data or device takeover.

Recommendation

Update Unitree device firmware to a version newer than 2025-09-20. Implement unique keys and IVs per device and consider additional encryption layers.

Other vulnerabilities in Unitree Go2/G1/H1/B2

CVE-2025-60251Medium
Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret containing the substring "unitree".

Original NVD description (English source)

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS