Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth

Security researcher disclosed two root RCE chains in Unitree G1 EDU robot (CVE-2026-76639, CVE-2026-76640), including BLE-based attack on Locomotion PC.