CVE-2026-115995 | Unitree Robotics Unitree Go2 up to 1.1.11.4 chat_go gpt_thread.py set_volume value os command injection

October 24, 2026 Yanac

A vulnerability, which was classified as very critical, was found in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-115995. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.

The vendor confirmed early: “Submission 990502 corresponds to our internal ticket #474 (Go2 chat_go set_volume OS command injection, CWE-78).”VulDB Recent EntriesRead More