CVE-2025-60250: Unitree b2

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV.

Affected products

  • Unitree b2: up to and including 2025-09-20
  • Unitree g1: up to and including 2025-09-20
  • Unitree GO2: up to and including 2025-09-20
  • Unitree h1: up to and including 2025-09-20

Published 2025-09-26. Last modified 2026-06-17.