VULNERABILITY INTELLIGENCE

CVE-2025-2894

CVSS score6.6 MEDIUM

EPSS probability0.88%

CISA KEVNot currently listed

Published2025-03-28

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can enable the manufacturer, and anyone in possession of the correct API key, complete remote control over the affected robotic device using the CloudSail remote access service.

Weakness classification

cve@takeonme.org: CWE-912

Primary references

cve@takeonme.org — Exploit, Third Party Advisory
cve@takeonme.org — Issue Tracking, Third Party Advisory
cve@takeonme.org — Exploit, Mitigation, Third Party Advisory
cve@takeonme.org — Press/Media Coverage
cve@takeonme.org — Press/Media Coverage