Evidence
Robots spread an exploit from one to the next; cars opened by Bluetooth
| Date | Case | Country | What happened | Source |
|---|---|---|---|---|
| May 24, 2024 | Ecovacs robot vacuum hijacks | United States | Hijacked vacuums shouted slurs and chased a dog; vendor blamed reused passwords | Source |
| Jul 11, 2025 | PerfektBlue | Germany | Bluetooth flaws gave one-click code execution on Mercedes, VW and Skoda infotainment | Source |
| Sep 20, 2025 | UniPwn | China | Hardcoded keys gave root on Unitree Go2, B2, G1 and H1 robots, spreading robot to robot | Source |
| Jan 2026 | Pwn2Own Automotive 2026 | Japan | Tesla infotainment takeover; $60,000 for an Alpitronic charger exploit | Source |
Registry
No registry incident turns on cyber-physical compromise yet
The cases above are documented, but none yet meets the registry bar of a named developer, a failed control and a known finder.
Exposure
10 of 17 agent types rate very significant or critical on connectivity surface or command and control channels
From the attack surface ratings, the agent types where this risk has the widest path in.
| Agent type | Dimension | Rating |
|---|---|---|
| Robotaxis and autonomous vehicles | Command and control channels | Very significant |
| Humanoid robots | Command and control channels | Very significant |
| Autonomous trucks | Command and control channels | Very significant |
| Drones | Connectivity surface | Very significant |
| Fleets and swarms | Connectivity surface | Very significant |
| Smart home assistants | Connectivity surface | Very significant |
| Coding and research agents | Command and control channels | Very significant |
| Workflow agents | Command and control channels | Very significant |
| Commerce agents | Command and control channels | Very significant |
| Enterprise agents | Command and control channels | Very significant |
Controls that bound it
- Identity and Cryptographic Attestation: who or what is acting, proven cryptographically
- Telemetry Integrity: whether the data feeding an agent has been tampered with
- OT and ICS Integration: how agents connect to industrial control systems
Rules
China and the US now regulate vehicle cybersecurity; the EU covers all connected products
| Rule | Jurisdiction | What it requires | Status |
|---|---|---|---|
| GB 44495-2024 vehicle cybersecurity | China | Lifecycle cybersecurity, testing, vulnerability reporting | New types from Jan 1, 2026 |
| BIS connected vehicle rule | US | Bans China- or Russia-linked connected vehicle software and hardware | MY2027 software, MY2030 hardware |
| EU Cyber Resilience Act | EU | Security by design and vulnerability reporting | Reporting from Sep 11, 2026 |
Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.
Record
Page Record
- Risk group
- Human Risks
- Datasets
- ai_risk_evidence.csv (4 rows); registry incidents (0 linked); ai_attack_surface.csv
- Key sources
- Ecovacs robot vacuum hijacks
PerfektBlue
UniPwn
Pwn2Own Automotive 2026 - Last verified
- October 2026