Two root remote code execution flaws found in Unitree G1 EDU robot

The vulnerabilities, tracked as CVE-2026-76639 and CVE-2026-76640, present distinct attack vectors. CVE-2026-76639 involves a network-adjacent path through chat_go and bashrunner, leading to root code execution.