Hacking Embodied AI

This Recorded Future analysis warns that embodied AI (humanoid and quadruped robots) present an expanding cyber-physical attack surface: documented backdoors and a critical Bluetooth/Wi‑Fi provisioning vulnerability in Unitree robots enable unauthenticated root access, wireless propagation across nearby units, and covert exfiltration of audio, video, and spatial telemetry (observed to a foreign IP), creating the potential for fleet-level compromises, physical botnets, espionage, and severe operational consequences; the report outlines business risk, mitigation actions, and a scenario illustrating reputational, legal, and operational impacts.