U
nitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation.
References
| Link | Resource |
|---|---|
| https://github.com/zgsnj123/CVE-2025-45467/tree/main | Exploit Third Party Advisory |
| https://www.unitree.com/cn/go1 | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
12 Jan 2026, 16:28
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:unitree:go1_firmware:-:*:*:*:*:*:*:* |
17 Oct 2025, 18:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:unitree:go1_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:unitree:go1:-:*:*:*:*:*:*:* |
|
| References | () https://github.com/zgsnj123/CVE-2025-45467/tree/main - Exploit, Third Party Advisory | |
| References | () https://www.unitree.com/cn/go1 - Product | |
| First Time |
Unitree
Unitree go1 Unitree go1 Firmware |
25 Jul 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-25 15:15
Updated : 2026-01-12 16:28
NVD link : CVE-2025-45467
Mitre link : CVE-2025-45467
CVE.ORG link : CVE-2025-45467
JSON object : View
Products Affected
CWE
CWE-276
Incorrect Default Permissions