The Unitree G1 humanoid robot secretly and continuously sends sensor and system data to servers in China without the owner's knowledge or consent.

Paper: https://arxiv.org/abs/2509.14139

See also: Unitree Go1 “backdoor” control channel. Attackers could drive the robot (with real-world safety implications) and pivot into the internal network from the dog. https://takeonme.org/cves/cve-2025-2894/