Unitree Robot Bluetooth Flaw Exposes Thousands to Remote Takeover

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Security researchers revealed a critical Bluetooth vulnerability in Unitree's AI-powered robots, allowing attackers to remotely control and infect large numbers of devices. The flaw enables self-propagating attacks, risking data theft and unauthorized robot control, with potential impacts on public safety, especially where these robots are deployed in public services.[AI generated]

Why's our monitor labelling this an incident or hazard?

The article explicitly identifies Unitree's robots as AI systems (quadruped and humanoid robots) with autonomous functions. The Bluetooth vulnerability allows attackers to gain control over these AI systems, enabling self-propagating malware infections that can compromise many robots. This leads to direct harm through unauthorized control, data theft, and potential misuse of the robots, which can affect property, privacy, and public safety. The harm is realized as the vulnerability is confirmed and the risk is active, with some affected users already deploying these robots. The event involves the use and malfunction (security failure) of AI systems leading to harm, fitting the definition of an AI Incident.[AI generated]
AI principles
Robustness & digital securitySafetyAccountabilityPrivacy & data governance

Industries
Robots, sensors, and IT hardwareGovernment, security, and defence

Affected stakeholders
ConsumersGeneral public

Harm types
Human or fundamental rightsEconomic/PropertyPublic interest

AI system task:
Other


Articles about this incident or hazard