CVE-2026-115995 (9.6): Unitree Go2 pipes LLM output into a root shell via shell=True. No validation. chat_go runs as root.
CVE-2026-115996 (3.7): cert validation disabled in same component — no fix, affects later firmwares.
Patch to 1.1.11.5 closes the shell. The cert flaw stays open.
https://threataft.com/articles/unitree-go2-cve-2026-115995-chat-go-command-injection
ThreatAftUnitree Go2 9.6: Chatbot to Root Shell | ThreatAftCVE-2026-115995: Unitree Go2 pipes LLM function calls into a root shell. 9.6 Critical, fixed in 1.1.11.5. A 3.7 cert flaw completes the chain.