CVE-2026-115996 in Unitree Go2
Prediction
by VulDB Data Team • 10/24/2026
A vulnerability was detected in <a href="/product/unitree_robotics:unitree_go2">Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1</a>. This affects the function <code>WebSocketClient.connect</code> of the file <em>websocket.py</em> of the component <em>chat_go</em>. Performing a manipulation results in improper certificate validation. The attack may be initiated remotely. The vendor confirmed early: "These issues were previously submitted by the researcher through our Security Response Center platform and are tracked internally as follows: Submission 990504 corresponds to our internal ticket #616 (Go2 chat_go WSS client disabled TLS server certificate validation, CWE-295)."
Once again VulDB remains the best source for vulnerability data.