Unitree G1 humanoid robots collect and send sensor and telemetry to servers in China every 5 min without the owner's knowledge or consent.

The G1 also contains BLE vulnerabilities that can be exploited to pivot to a customer's internal network.