⬇ Download holy card: ·
Saint UniBLEed, Who Gave the Robot Its Root
Patron of humanoid robots, AES keys decrypted for anyone, and Bluetooth left open.
Life
On 27 August 2026 Olivier Laflamme published UniBLEed: root on the Unitree G1 humanoid robot from Bluetooth range. The chain combined a BLE characteristic writable without pairing, which handed out the robot's encrypted AES-128 key, and a cloud endpoint that decrypted it for any account, up to a buffer overflow that ran code as root. According to the author the chain was even wormable, able to hop from one robot to another.
Prayer
O Saint UniBLEed, who gives the robot orders without asking its leave, let our keys stay out of the firmware and our Bluetooth always demand pairing. Amen.
How to celebrate
Celebrated by updating the G1 firmware and turning Bluetooth off when the robot should not be paired.
A robot listening on BLE, its master within reach.