Chinese Humanoid Robots Pose Hacking Risks, Data Leaks to China

Humanoid robots from Chinese firms like Unitree are plagued by cybersecurity flaws, secretly transmitting sensitive data to China and enabling hacking for espionage or network takeovers. Experts warn of risks to critical infrastructure, urging vetting, open-source alternatives, and regulations to prevent chaos.
Chinese Humanoid Robots Pose Hacking Risks, Data Leaks to China
Written by Tim Toole

In the rapidly evolving world of robotics, where humanoid machines promise to revolutionize industries from manufacturing to healthcare, a shadowy underbelly has emerged: severe cybersecurity vulnerabilities that could turn these innovations into tools for espionage and network infiltration. Recent investigations reveal that certain humanoid robots, particularly those manufactured in China, are secretly transmitting sensitive data back to servers in the country, potentially exposing users to hacking risks that compromise entire networks. This isn’t mere speculation; it’s backed by detailed analyses from cybersecurity experts who have dissected the robots’ code and communication protocols.

The focal point of these concerns is the Unitree G1, a popular humanoid robot from Chinese firm Unitree Robotics. Researchers have discovered that the device establishes persistent connections to external servers, beaming out sensor data, system logs, and even audio-visual feeds without user consent. This data flow occurs every few minutes, creating a continuous stream that could include proprietary business information or personal details from deployment environments like factories or homes.

Uncovering the Hidden Backdoors

Such revelations come from a comprehensive report published in ZME Science, where experts detailed how these robots act as “surveillance nodes” capable of being repurposed for cyber operations. The article highlights vulnerabilities that allow remote actors to exploit the robots’ connectivity, potentially turning them into entry points for broader network takeovers. For instance, hackers could leverage the robot’s integrated cameras and microphones to spy on surroundings, or use its processing power to launch distributed denial-of-service attacks.

Adding to the alarm, similar issues have plagued other Chinese-made devices. A post on X from cybersecurity enthusiasts pointed to past incidents with Unitree’s Go1 robot dogs, which were found to have pre-installed backdoors enabling global surveillance. This pattern suggests a systemic risk in hardware sourced from regions with lax data privacy regulations, where mandatory data-sharing laws might compel manufacturers to embed such features.

The Broader Implications for Global Supply Chains

Industry insiders are particularly worried about the integration of these robots into critical infrastructure. According to a 2025 analysis by the U.S.-China Economic and Security Review Commission, available on their official site, China’s aggressive push for humanoid robot dominance—aiming for mass production by 2025—could flood markets with insecure devices. The commission notes that firms like Unitree are at the forefront, but their rapid development often prioritizes speed over security, leaving exploitable flaws.

Recent news from IEEE Spectrum further amplifies this, reporting on a vulnerability in Unitree robots that could transform them into botnets. In their article, experts warn that insufficient encryption and hardcoded credentials make it trivial for hackers to gain control, potentially disrupting operations in sectors like logistics or elder care where these robots are increasingly deployed.

Escalating Risks in a Connected World

The timing couldn’t be more precarious, as China ramps up its robotics ambitions. A South China Morning Post piece from 2023 outlined Beijing’s blueprint for world leadership in humanoid tech by 2027, including facilities training over 100 robots simultaneously, as noted in CyberGuy’s coverage. Yet, this scale introduces massive risks; X users have shared viral threads about robots “attacking” handlers, hinting at control failures that could be exacerbated by cyber intrusions.

Compounding the issue, emerging 5G-A technologies, showcased at MWC 2025 by Chinese firms like Huawei, enable real-time remote control of humanoids, per Interesting Engineering’s report. While this boosts efficiency, it also creates vectors for hackers to hijack robots, turning them into physical threats or data siphons.

Strategies for Mitigation and Future Safeguards

To counter these threats, companies are urged to adopt rigorous vetting processes. Experts recommend open-source alternatives or robots from trusted vendors, coupled with network segmentation to isolate devices. A World Economic Forum discussion from June 2025 emphasizes the need for “clear guardrails” in adopting humanoids, warning that without them, the promise of disruption could veer into chaos.

Ultimately, as orders for Chinese humanoids surpass 30,000 units this year—per estimates from the China Mobile Robot Alliance—the onus falls on regulators and businesses to demand transparency. Incidents like the viral Fox News video of a robot “lashing out” underscore the stakes: what begins as a data leak could escalate to full network compromise, reshaping how the world views these mechanical marvels.

Subscribe for Updates

CybersecurityUpdate Newsletter

The CybersecurityUpdate Email Newsletter is your essential source for the latest in cybersecurity news, threat intelligence, and risk management strategies. Perfect for IT security professionals and business leaders focused on protecting their organizations.

By signing up for our newsletter you agree to receive content related to ientry.com / webpronews.com and our affiliate partners. For additional information refer to our terms of service.

Notice an error?

Help us improve our content by reporting any issues you find.

Get the WebProNews newsletter delivered to your inbox

Get the free daily newsletter read by decision makers

Subscribe
Advertise with Us

Ready to get started?

Get our media kit

Advertise with Us