S2 · · Unitree
| Company | Unitree |
| Category | humanoid |
| Type | cyber |
| Date | |
| Time of day | not documented |
| Location | no physical site (recall / fleet-wide / aggregate record) |
| Severity | S2 (minor injury or single-unit damage) |
| Scale | fleet-wide (Go1 model) |
| Confidence | high |
| Verification | Cited source on file; not independently re-verified |
| Source | OECD.AI Incident Monitor |
Security researchers disclosed a firmware backdoor in Unitree's Go1 quadruped that auto-started on boot, tunneled to a China-based cloud server, and gave anyone with the right API key full remote control; vulnerable units were confirmed operating on networks at MIT, Princeton, Carnegie Mellon and the University of Waterloo.