Beyond Model Jailbreak: Systematic Dissection of the "Ten DeadlySins" in Embodied Intelligence

TL;DR

This paper systematically analyzes the security vulnerabilities of embodied AI systems, specifically the Unitree Go2 platform, revealing ten cross-layer weaknesses that threaten device integrity and safety.

Contribution

It provides the first comprehensive security dissection of embodied AI systems, identifying systemic vulnerabilities across hardware, software, and communication layers.

Findings

Discovered ten systemic security vulnerabilities in the Unitree Go2 platform.

Demonstrated how these vulnerabilities enable device hijacking and data extraction.

Provided security recommendations for robust embodied AI system design.

Abstract

Embodied AI systems integrate language models with real world sensing, mobility, and cloud connected mobile apps. Yet while model jailbreaks have drawn significant attention, the broader system stack of embodied intelligence remains largely unexplored. In this work, we conduct the first holistic security analysis of the Unitree Go2 platform and uncover ten cross layer vulnerabilities the "Ten Sins of Embodied AI Security." Using BLE sniffing, traffic interception, APK reverse engineering, cloud API testing, and hardware probing, we identify systemic weaknesses across three architectural layers: wireless provisioning, core modules, and external interfaces. These include hard coded keys, predictable handshake tokens, WiFi credential leakage, missing TLS validation, static SSH password, multilingual safety bypass behavior, insecure local relay channels, weak binding logic, and unrestricted firmware access. Together, they allow adversaries to hijack devices, inject arbitrary commands, extract sensitive information, or gain full physical control.Our findings show that securing embodied AI requires far more than aligning the model itself. We conclude with system level lessons learned and recommendations for building embodied platforms that remain robust across their entire software hardware ecosystem.