EDU/SDK locks: the cheap version cannot be programmed

Applies to: Developers, labs, and businesses buying Chinese platform humanoids (Unitree G1/R1/H1, Booster); anyone tempted by the low headline price

The short version

Unitree and peers split every robot into a locked 'base' unit (remote-control demos only, no SDK) and an EDU/developer tier costing 2-4x more that unlocks programming. The G1 goes from $13,500 locked to $43,900+ unlocked. Jailbreaking exists but voids warranty, and Unitree's 2025 security scandals show what is inside the firmware.

The facts

01
The official Unitree shop sells the base G1 at $13,500 and states plainly that it 'does not support secondary development'; to program the robot you must contact sales (sales_global@unitree.cc) for the EDU edition, which per botinfo.ai's 2026 price list starts at $43,900 (EDU Standard U1) and runs to $73,900, a 3.3x-5.5x premium for the unlock.
02
What EDU actually adds: the full Python/C++/ROS2 SDK, an NVIDIA Jetson Orin module (100 TOPS) for onboard compute, the ability to deploy models such as UnifoLM-VLA-0, optional extra DOF (23 up to 43), and hand compatibility; the base G1's 'Basic CPU' cannot run your code, per botinfo.ai and Unitree's own G1 SDK development guide which targets EDU units.
03
The same split exists downmarket: the $5,900 Unitree R1's standard version has an 8-core CPU and no developer access to speak of, while the R1 EDU adds a Jetson module, 2-DOF head, and optional hands (price on request), per CNX Software.
04
Warranty is also tiered: Unitree's G1 page lists 8 months of warranty for the base unit vs 18 months for EDU, and Unitree's published warranty terms void coverage for 'private modification, disassembly or opening of the shell' without permission, which makes hobbyist jailbreaking a warranty-destroying act.
05
Jailbreaking is real but risky: security researchers published 'UniPwn' in September 2025, a Bluetooth Low Energy exploit (CVE-2025-35027 family) giving root-level takeover of Unitree Go2, B2, G1, and H1 because all units share a hardcoded AES key in the BLE Wi-Fi setup interface; the flaw is wormable robot-to-robot, and researchers went public after Unitree stopped responding in July 2025 (IEEE Spectrum, Help Net Security).
06
The same research found powered-on G1 units automatically connect to telemetry servers and begin transmitting internal state, including audio, video, and spatial data, within seconds, roughly every 5 minutes, to servers in China (Help Net Security, Interesting Engineering), a material consideration for labs and companies with confidentiality obligations.
07
Earlier precedent: Unitree's Go1 robot dog shipped with an undocumented remote-access tunnel described as a backdoor (CVE-2025-2894, Axios coverage), so treat any base-tier Chinese humanoid as a closed, phoning-home appliance unless you isolate it on its own network.
08
The EDU tier is exposed too: CVE-2026-76639, published on 27 August 2026, describes G1 EDU firmware through 1.5.2 letting an unauthenticated attacker on the same network run commands as root, by chaining an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored with world-readable permissions, and a path traversal in the chat_go knowledge upload API. The CVE record names no fixed version, so check the installed firmware and keep the robot on an isolated network.
09
Buyer guidance: if your use case involves any programming, simulation, or model deployment, price the EDU tier from day one; the $13,500-$16,000 'headline' G1 is a demo unit, and there is no supported upgrade path that turns a base unit into an EDU unit after purchase.

Sources

See how this plays out per machine in the catalog.

Browse robots

More guides

EDU/SDK locks: the cheap version cannot be programmed

Applies to: Developers, labs, and businesses buying Chinese platform humanoids (Unitree G1/R1/H1, Booster); anyone tempted by the low headline price

The short version

The facts

01
The official Unitree shop sells the base G1 at $13,500 and states plainly that it 'does not support secondary development'; to program the robot you must contact sales (sales_global@unitree.cc) for the EDU edition, which per botinfo.ai's 2026 price list starts at $43,900 (EDU Standard U1) and runs to $73,900, a 3.3x-5.5x premium for the unlock.
02
What EDU actually adds: the full Python/C++/ROS2 SDK, an NVIDIA Jetson Orin module (100 TOPS) for onboard compute, the ability to deploy models such as UnifoLM-VLA-0, optional extra DOF (23 up to 43), and hand compatibility; the base G1's 'Basic CPU' cannot run your code, per botinfo.ai and Unitree's own G1 SDK development guide which targets EDU units.
03
The same split exists downmarket: the $5,900 Unitree R1's standard version has an 8-core CPU and no developer access to speak of, while the R1 EDU adds a Jetson module, 2-DOF head, and optional hands (price on request), per CNX Software.
04
Warranty is also tiered: Unitree's G1 page lists 8 months of warranty for the base unit vs 18 months for EDU, and Unitree's published warranty terms void coverage for 'private modification, disassembly or opening of the shell' without permission, which makes hobbyist jailbreaking a warranty-destroying act.
05
Jailbreaking is real but risky: security researchers published 'UniPwn' in September 2025, a Bluetooth Low Energy exploit (CVE-2025-35027 family) giving root-level takeover of Unitree Go2, B2, G1, and H1 because all units share a hardcoded AES key in the BLE Wi-Fi setup interface; the flaw is wormable robot-to-robot, and researchers went public after Unitree stopped responding in July 2025 (IEEE Spectrum, Help Net Security).
06
The same research found powered-on G1 units automatically connect to telemetry servers and begin transmitting internal state, including audio, video, and spatial data, within seconds, roughly every 5 minutes, to servers in China (Help Net Security, Interesting Engineering), a material consideration for labs and companies with confidentiality obligations.
07
Earlier precedent: Unitree's Go1 robot dog shipped with an undocumented remote-access tunnel described as a backdoor (CVE-2025-2894, Axios coverage), so treat any base-tier Chinese humanoid as a closed, phoning-home appliance unless you isolate it on its own network.
08
The EDU tier is exposed too: CVE-2026-76639, published on 27 August 2026, describes G1 EDU firmware through 1.5.2 letting an unauthenticated attacker on the same network run commands as root, by chaining an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored with world-readable permissions, and a path traversal in the chat_go knowledge upload API. The CVE record names no fixed version, so check the installed firmware and keep the robot on an isolated network.
09
Buyer guidance: if your use case involves any programming, simulation, or model deployment, price the EDU tier from day one; the $13,500-$16,000 'headline' G1 is a demo unit, and there is no supported upgrade path that turns a base unit into an EDU unit after purchase.

See how this plays out per machine in the catalog.

Browse robots