{"id":"CVE-2026-115996","revision":"60ed1c8145344d1780a5f3d15bddb397","records":[{"revision":"60ed1c8145344d1780a5f3d15bddb397","observedAt":"2026-10-25T00:17:04.344+00:00","statement":{"source":"cve-program","id":"CVE-2026-115996","aliases":[],"title":"Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation","description":"A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.connect of the file websocket.py of the component chat_go. Performing a manipulation results in improper certificate validation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. The vendor confirmed early: \"These issues were previously submitted by the researcher through our Security Response Center platform and are tracked internally as follows: Submission 990504 corresponds to our internal ticket #616 (Go2 chat_go WSS client disabled TLS server certificate validation, CWE-295).\"","state":0,"publishedAt":"2026-10-24T22:30:21.197+00:00","modifiedAt":"2026-10-24T22:30:21.197+00:00","affected":[{"ecosystem":"Vendor product","name":"Unitree Go2","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unitree Robotics\",\n                    \"product\": \"Unitree Go2\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1.1.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.6\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.13\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.14.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.14.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.15.0\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"1.1.15.1\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:2.3:a:unitree_robotics:unitree_go2:*:*:*:*:*:*:*:*\"\n                    ],\n                    \"modules\": [\n                        \"chat_go\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X","score":6.3,"severity":"MEDIUM"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:C","score":3.7,"severity":"LOW"},{"system":"CVSS 3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:C","score":3.7,"severity":"LOW"},{"system":"CVSS 2.0","vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N/E:ND/RL:ND/RC:C","score":2.6,"severity":null}],"references":["https://vuldb.com/vuln/426094","https://vuldb.com/vuln/426094/cti","https://vuldb.com/cve/CVE-2026-115996","https://vuldb.com/submit/990504"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115996","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-115996","identifiers":["CVE-2026-115996"]},"retained":false,"historicalAffected":[]}],"coverage":[]}