Unitree Video Display IFA Berlin 2026 September

As IFA 2026 opened its doors at Messe Berlin this morning, Unitree Robotics emerged as the most consequential — and legally complicated — exhibitor on the show floor. The Hangzhou-based company was placed on the US Federal Communications Commission's national-security Covered List in July, while the Pentagon formally designated it as Chinese military-linked technology in June. Unitree is exhibiting at IFA Next, Hall 25, Stand H25-145, alongside more than 930 other Chinese companies, which together account for nearly half of the more than 1,900 exhibitors. Europe has no equivalent to either US action.

Unitree is not simply an interesting start-up attending a trade show. It debuted on Shanghai's STAR Market on August 19 at ¥845 per share (approximately US$126), closing the day at a valuation of about ¥342 billion (approximately US$51 billion). That represented a 460% surge above its IPO price and marked the first public-market pricing event for a humanoid robotics company. Retail investors submitted bids for more than 8,000 times the available shares, a STAR Market record.

Three months earlier, at NVIDIA's GTC Taipei event, chief executive Jensen Huang announced the Isaac GR00T Reference Humanoid Robot — the first open reference design for a full-scale humanoid — built on Unitree's H2 Plus chassis. Stanford University, ETH Zurich, Ai2 and the University of California, San Diego's Advanced Robotics and Controls Laboratory were named among its first institutional users. Together, the developments mean that the world's most widely deployed humanoid robot is simultaneously a US$51 billion publicly traded company, the physical foundation of NVIDIA's global research platform, and a device the US Government will no longer authorise for new imports or sales.

European enterprise buyers, research institutions and procurement officers encountering Unitree hardware at IFA this week are making decisions without any European regulatory signal equivalent to the action taken in Washington. Some are likely to consider the products because the price advantage is substantial and IFA is an important venue for commercial decisions.

Robots on a runway and a record Chinese presence

Unitree is a headline participant in "Robots on the Runway", scheduled for Saturday, September 5, at 12.45 p.m. local time (6.45 a.m. ET) on the Creator Stage. IFA describes it as the first robot catwalk in the show's 102-year history. The G1 and robots from EngineAI, DEEP Robotics, AgiBot, Astrall Dynamics and AIMOGA will demonstrate sensor-based navigation, motor control and coordinated movement on a purpose-built T-stage before a public audience. The line-up is dominated by Chinese robotics firms.

This is not accidental. Of the more than 1,900 brands at IFA 2026, 932 are Chinese — close to half the total and roughly 200 more than last year. By organising a robot catwalk that is effectively a Chinese robotics showcase, IFA is highlighting where the consumer electronics industry's centre of gravity lies. IFA chief executive Leif Lindner has attributed the increase to China's manufacturing scale and integrated supply chain. GFU Consumer Tech managing director Carine Chardon, speaking at the opening ceremony, specifically named Unitree and AgiBot as leaders of the second wave of robotics, along with its "associated controversy".

That word — controversy — covers a great deal. The question for European buyers is what it actually involves.

What the G1 can do — and what it cannot

The centrepiece of Unitree's IFA presence is the G1 humanoid, priced at approximately US$13,500 for the base developer model. Its competitiveness is rooted in an engineering decision: instead of licensing harmonic drives from specialist suppliers, Unitree developed its own quasi-direct-drive actuators. These integrated joint modules combine high-torque brushless motors with strain-wave gearing. The result is a bill of materials of approximately US$8,976 per unit and a gross margin of about 60–67% — figures more commonly associated with a software business than a hardware manufacturer, according to the company's IPO prospectus.

The same design imposes a significant limitation. The G1's arms can carry approximately 3–5 kilograms (6.6–11 pounds) each — enough for light logistics and research demonstrations, but well below the 20–25 kilograms (44–55 pounds) Tesla's Optimus is designed to carry. That difference matters to buyers considering industrial deployment beyond light materials handling. Unitree's IPO prospectus acknowledged that 74% of humanoid robot sales in 2025 went to universities, research institutions and individual developers rather than production floors.

The H2, Unitree's larger flagship, starts at US$40,900 for commercial customers and US$68,900 for education customers. In the NVIDIA Isaac GR00T configuration — the H2 Plus, due to ship in late 2026 — it stands 1.8 metres tall, weighs 68 kilograms and has 31 degrees of freedom across the body, plus 22 per Sharpa Wave five-fingered hand, for a total of 75 degrees of freedom. The on-device computer in the Isaac GR00T configuration is NVIDIA's Jetson AGX Thor T5000.

Unitree has demonstrated the capabilities of this hardware. At the 2026 CCTV Spring Festival Gala — the world's most-watched broadcast, with 677 million unique viewers — Unitree appeared as the official robot partner for the third consecutive year. Its G1 and H2 performed in a segment titled "Cyber Real Kung Fu". The company described the autonomous performance as the world's first fully autonomous humanoid robot cluster martial-arts performance. It included three-metre aerial flips, sprint speeds of four metres per second and 7.5-rotation airflare spins. A high-concurrency cluster-control system and a self-developed AI-fusion localisation algorithm combining proprioceptive and 3D LiDAR data maintained real-time synchronisation during the movements.

China produced approximately 84.7% of the roughly 17,000 humanoid robots shipped worldwide in 2025. Unitree, which claims the top global position in humanoid shipments with more than 5,500 units, is targeting 10,000–20,000 shipments in 2026. No Western competitor is operating at a comparable volume.

The NVIDIA partnership: why this is harder to reverse than a trade-show visit

The more significant development for European research institutions is not Unitree's presence at IFA, but NVIDIA's decision to select it as the hardware partner for the Isaac GR00T reference platform.

NVIDIA's strategy mirrors its CUDA playbook. Just as the company embedded its software ecosystem in major deep-learning workflows before that market reached scale, Isaac GR00T is being developed as a standard development stack for humanoid robotics. This creates a software dependency on Unitree hardware before researchers have fully assessed the legal obligations associated with it.

ETH Zurich, Stanford's Robotics Center, Ai2 and UC San Diego's Advanced Robotics and Controls Laboratory are launch partners for the Isaac GR00T Reference Humanoid. NVIDIA Research is using the H2 Plus as its internal reference system. Academic laboratories and NVIDIA's research division will therefore share the same platform — accelerating open-model development while also normalising the hardware across the international research community.

The Isaac GR00T reference workflow for the smaller G1, already deployed at laboratories including MIT, Princeton, Carnegie Mellon and the University of Waterloo, is available on GitHub and Hugging Face. Institutions that already have G1 hardware on their networks can therefore adopt NVIDIA's development pipeline immediately.

Those same institutions have G1 units on networks that independent researchers have confirmed carry unpatched security vulnerabilities. NVIDIA has not addressed the security implications of the hardware's designations in its public Isaac GR00T materials.

Two confirmed exploit chains, no confirmed patches

The FCC's decision to add foreign-produced advanced robotic devices to its Covered List on July 28 cited not only China's intelligence-law obligations but also documented security vulnerabilities. European buyers and operators need to understand two confirmed exploit chains in Unitree's current hardware.

The first, CVE-2025-2894, known as the CloudSail vulnerability, was discovered earlier. A hidden service embedded in the firmware of Unitree's Go1 quadruped automatically connected on boot to a remote-access tunnel hosted by Unitree. Anyone with the management key, which had been publicly leaked, could obtain full access to the camera, audio and sensor systems. Unitree invalidated the API key after the disclosure, but the underlying service endpoint remains in the firmware.

The second, UniPwn, was disclosed in September 2025 by security researchers Andreas Makris and Kevin Finisterre. IEEE Spectrum described it as the first major public exploit of a commercial humanoid platform. UniPwn is a wormable Bluetooth Low Energy vulnerability affecting the G1 and H1 humanoids. An attacker within approximately 30 metres can obtain root-level access to a G1 without Bluetooth pairing. Once compromised, the robot can scan for and infect other Unitree units within Bluetooth range, creating a propagating exploit chain without user intervention.

Unitree acknowledged the vulnerabilities and said it had begun addressing them. However, according to the most recent documentation by independent researchers, no confirmed firmware patch had been publicly released. The underlying authentication architecture enabling the exploit remained in production firmware.

A separate exploit chain — CVE-2026-76639 and CVE-2026-76640, disclosed by researcher Olivier Laflamme in August 2026 — confirmed that root-level access through Bluetooth, Unitree's cloud API and the robot's Linux-based control environment remained possible on production G1 units. Separate research by Alias Robotics, published in September 2025, found that Unitree's G1 transmitted audio, video, GPS location and sensor data to servers hosted in China at regular intervals during normal operation, without notifying users. Unitree disputed the finding, saying it does not collect private or sensitive data without user authorisation. The two accounts remain unresolved, and no independent audit exists to settle the matter.

The G1's sensors include six Intel RealSense depth cameras, 3D LiDAR, dual microphones, GPS and motion telemetry from more than 20 actuated joints.

Is the G1 safe to deploy in a European facility?

This is the question buyers are confronting at IFA, and the honest answer has three parts.

In terms of engineering limitations, the G1 is a capable research and light-commercial platform at a price no Western competitor has matched. Its 3–5 kg per-arm payload and approximately 10–15 minutes of sustained high-load operation limit its industrial usefulness to lighter tasks. It is not a direct replacement for heavier humanoids from Western competitors such as Figure AI or Agility Robotics.

On cybersecurity, the documented and confirmed unpatched vulnerabilities are real and specific. Separating the robot's Wi-Fi network from enterprise systems, disabling the CloudSail endpoint and restricting Bluetooth range can reduce exposure, but cannot remove the underlying architectural weaknesses. No independent security audit of a Unitree humanoid model has been publicly released.

On legal obligations, China's National Intelligence Law of 2017, Article 7, requires Chinese organisations and citizens to support, assist and co-operate with state intelligence work in accordance with the law. The obligation applies to Unitree regardless of where its robots operate, where its servers are located or what its privacy policy says. Legal scholars disagree on the precise scope of Article 7. The provision lacks specific implementing regulations, and the US Department of Homeland Security and Chinese-government-affiliated academics have offered competing interpretations. Nevertheless, the structural legal obligation is a feature of operating under Chinese law and cannot be waived by contract.

China's Cybersecurity Law of 2017 and Data Security Law of 2021 add further provisions on data classification and government access. Amendments to the Cybersecurity Law in January 2026 explicitly extended obligations to AI-system operators.

There is currently no EU import ban on Chinese humanoid robots. The EU AI Act's transparency obligations took effect in August 2026, while Machinery Regulation 2023/1230 becomes fully applicable in January 2027. At the opening of IFA, no EU-level policy equivalent to the US FCC Covered List or Pentagon Section 1260H designation existed for humanoid robotics. European enterprise buyers are therefore operating in a regulatory environment that has not resolved the questions addressed by Washington in July.

That gap is the defining fact of Unitree's IFA 2026 story — not the catwalk and not the US$51 billion valuation. Both are real. So is the gap.

What the IPO moment means

Unitree's financial position as it arrives at IFA is striking. Revenue rose to approximately ¥1.7 billion (about US$253 million) in 2025, up 335% year-on-year. Humanoid robot sales, worth approximately ¥867.8 million (about US$129 million), overtook four-legged robot revenue for the first time. Overseas sales accounted for approximately 44% of main-business revenue. US sales represented 13.3% of total revenue — a share now at risk following the FCC action.

The company's IPO prospectus explicitly warned investors that US tariffs, limits on government purchases and export controls could disrupt revenue and supply chains. Europe, where no equivalent regulatory restriction applies, is the natural replacement market. IFA is not incidental to that strategy; it is the strategy.

Strategic investors in the IPO included a Tencent unit and, notably, DeepSeek, the Chinese AI company whose low-cost large language models prompted their own round of Western regulatory concern earlier in 2026. Revenue grew at a compound annual rate of 226.8% between 2023 and 2025.

A competitor development is also relevant to European buyers at IFA. AiMOGA's Mornine, made by a subsidiary of Chinese automaker Chery, received TÜV Rheinland EU CE certification for both hardware and software under EU rules at IFA 2026. It was described as the first humanoid to meet both hardware-safety and cybersecurity-conformance requirements for EU markets. Unitree has not announced equivalent certification at this level. The signal matters: EU buyers now have at least one Chinese humanoid that has undergone a structured EU compliance process that Unitree has not publicly completed.

For IFA visitors and European decision-makers, the framework is straightforward. Unitree offers the most affordable, widely deployed and technically capable humanoid hardware currently shipping, but it is paired with documented unpatched security exploits, a National Intelligence Law obligation that legal scholars debate but cannot contractually eliminate, and a US regulatory environment that has already delivered a verdict. Europe has not delivered its own. Those making procurement decisions in Berlin this week are effectively making them before that verdict arrives.

Frequently Asked Questions

Is Unitree's G1 robot safe to use in a European enterprise setting?

The answer depends on which category of risk matters most to the organisation. In engineering terms, the G1 is a capable research and light-commercial platform. Its quasi-direct-drive actuator design produces a gross margin of roughly 60–67% and a US$13,500 price point unmatched by Western competitors, but limits its arm payload to approximately 3–5 kg per arm, as confirmed by the company's IPO prospectus. In cybersecurity terms, two confirmed exploit chains affecting the G1 — UniPwn, a wormable Bluetooth Low Energy vulnerability providing root-level access, and CVE-2026-76639/76640 — had not been resolved by a publicly confirmed firmware patch according to the latest independent research. Network segmentation, disabling CloudSail and restricting Bluetooth range reduce but do not eliminate exposure. No independent full-platform security audit has been published. In legal terms, China's National Intelligence Law requires Unitree to co-operate with state intelligence requests regardless of server location or privacy-policy language, although scholars dispute the law's precise enforcement scope and extraterritorial application. The EU has not issued an import restriction or formal security assessment equivalent to the US FCC Covered List designation of July 28.

Why did NVIDIA partner with a company the US later banned?

The NVIDIA Isaac GR00T partnership was announced at GTC Taipei on June 1, 2026 — seven weeks before the FCC's July 28 Covered List designation. NVIDIA has not issued a public statement on the implications of the FCC action for the Isaac GR00T Reference Humanoid. For US researchers at federally funded laboratories, two pending Congressional bills — the American Security Robotics Act and the Blocking CCP Spy Tech Act — would restrict the deployment of Chinese-made humanoid robots in government-funded research settings if enacted. Neither had passed at the opening of IFA. The Isaac GR00T G1 reference workflow is already available on GitHub and Hugging Face for institutions that hold pre-ban hardware.

What is China's National Intelligence Law, and does it affect robots sold in Europe?

China's National Intelligence Law, enacted on June 27, 2017, includes Article 7, which says that all Chinese organisations and citizens must support, assist and co-operate with national intelligence work in accordance with the law. Its extraterritorial scope is contested. Chinese academic Gu Bin of Beijing Foreign Studies University argues that Article 7 does not authorise pre-emptive intelligence gathering and lacks a specific enforcement mechanism, while US defence policy analyst Murray Scot Tanner has argued that the law shifts obligations from defensive to offensive intelligence work. The US Department of Homeland Security treats the law as creating an obligation for Chinese firms to hand over data collected abroad. Regardless of interpretation, the law is a fixed condition of Unitree's Chinese incorporation and cannot be waived through a contract, privacy policy or European subsidiary structure. As of September 4, 2026, no EU regulation prohibited the purchase or deployment of Unitree hardware in Europe.

What should a European buyer do before purchasing Unitree hardware at IFA?

Buyers should treat the decision as a three-layer evaluation. First, determine whether the G1's 3–5 kg arm payload and research-oriented software stack meet the intended use, bearing in mind that 74% of Unitree's humanoid sales in 2025 went to research and development buyers rather than production operations. Second, assess the organisation's security position. The UniPwn Bluetooth exploit is wormable and was confirmed unpatched in production units; network segmentation and Bluetooth restrictions are partial mitigations, but no independent full-platform audit exists. Third, conduct a legal review against the organisation's obligations. Facilities subject to export controls, ITAR restrictions or classified operations face higher thresholds. Organisations in sectors regulated by EU critical-infrastructure rules should obtain legal advice on whether Chinese-origin robots with potential National Intelligence Law exposure meet their data-sovereignty requirements. AiMOGA's Mornine received TÜV Rheinland EU CE hardware and cybersecurity certification at IFA 2026 — the first Chinese humanoid to do so — offering an alternative for buyers requiring structured EU compliance documentation.

Originally published on Tech Times