BLE Decryption Vulnerability in Unitree Robotics

CVE-2025-60250

What is CVE-2025-60250?

Certain Unitree robotics devices, including Go2, G1, H1, and B2, have a vulnerability that enables attackers to decrypt sensitive BLE packet data. This occurs through the use of a specific cryptographic key and initialization vector, allowing unauthorized access to the transmitted information. This security flaw poses a risk as it may expose critical communications and data exchanged between devices, highlighting the need for prompt remediation.

References