A Chinese-Built Humanoid Line Opens on European Soil
Root exploits on a Unitree G1, EXL buys the data layer of physical AI, and Deere invests into the downturn.
The Big Number
Serbia's new Sabac plant is built to turn out 20,000 humanoid robots and robot dogs a year, the first mass-production line for them on European soil.
Welcome back to your Robot Briefing
This week the robot story moved off the demo stage and onto the factory floor, the balance sheet and the threat model. A humanoid line opened in Europe, a services giant bought the data layer that trains physical AI, and a security researcher reminded everyone that a humanoid is a computer that can walk.
None of it is about a robot doing a backflip. All of it is about who builds these machines, who trains them and who can break into them, which is exactly the part that lands on an operations desk.
The 60-Second Read
Europe got its first humanoid robot factory, and two Chinese companies built it, in Serbia.
Two fresh exploits hand an attacker root on a Unitree G1 humanoid, one of them over Bluetooth with no pairing.
EXL paid up to $310 million for iMerit, a bet that clean training data, not bigger models, is what makes robots reliable.
John Deere raised its outlook and put $10 million into ag-robotics R&D while the rest of farm equipment slumps.
News
A Chinese-Built Humanoid Line Opens on European Soil
Image Source: There's A Robot For That
Snapshot: Chinese suppliers AGIBOT and Minth Group opened the first mass-production plant for humanoid robots in Europe, in the Serbian city of Sabac, with President Aleksandar Vucic on the floor as the first unit rolled off the line.
Breakdown:
The first phase carries a 20 million euro investment, and a second site planned for Indjija lifts the total to 200 million euros.
The plant is engineered to build 20,000 humanoid robots and robot dogs a year, with initial assembly starting above 5,000 units annually.
The debut robot folded clothes, played chess, wrote Chinese calligraphy and danced for the cameras, staged capability rather than a shipping product.
AGIBOT supplies the embodied-AI stack, while Minth, an automotive-parts maker, brings the manufacturing base and the government relationships.
Takeaway: For European operators the interesting part is not the dancing robot, it is the address. A local line means shorter lead times, euro pricing and units that have to be built to be placed on the EU market, which pulls humanoid sourcing out of the import-only column for the first time.
News
Researchers Chain Two Root Exploits on a Popular Humanoid
Snapshot: Security researcher Olivier Laflamme published two independent chains that reach root on the Unitree G1, one over the network and one that needs only Bluetooth range and no pairing.
Breakdown:
The two flaws, tracked as CVE-2026-76639 and CVE-2026-76640, both end in full root control of the robot's locomotion computer.
The Bluetooth path abuses a GATT characteristic that accepts writes without pairing, letting a nearby attacker pull the device's encryption key and run code as root.
The researcher calls the Bluetooth chain wormable, meaning one compromised G1 can infect the next G1 in range, and so on.
Unitree pushed mitigations during the disclosure window, including a cloud ownership-binding check, though owners have no single confirmed patched-firmware target to point to.
Takeaway: Any humanoid on your floor is a networked Linux computer with actuators, and it inherits every problem that description implies. Before a pilot grows past one unit, treat firmware patching, network segmentation and Bluetooth exposure as budget line items, not afterthoughts.
⏱️ The Compliance Clock
142 days
until the EU Machinery Regulation becomes mandatory (Jan 20, 2027)
This week's lead is a humanoid line built in Europe for European buyers, which puts it squarely under the EU Machinery Regulation, the framework replacing the old Machinery Directive for anything placed on the EU market. It sets the essential health and safety requirements a machine must meet before it can be CE-marked and sold, and it raises the documentation bar for autonomous and connected equipment in particular. If you plan to buy or deploy a humanoid in Europe, the conformity paperwork is the part that decides whether it can legally go to work.
The Data Layer Behind Physical AI Gets Consolidated
Snapshot: Data and AI firm EXL completed its acquisition of iMerit, the annotation specialist whose labeled data trains robots, autonomous vehicles and other physical-AI systems, in a deal worth up to $310 million.
Breakdown:
The structure is $170 million upfront plus up to $140 million in earnouts tied to milestones over the next two years.
iMerit, founded in 2012, builds curated training data through subject-matter experts and its Ango Hub platform, including a project with Carbon Robotics to train a weeding model on millions of plant images.
Founder Radha Basu joins EXL as an executive vice president and head of iMerit, folding the unit into a company of roughly 68,000 employees.
The thesis behind the price is that the bottleneck for reliable physical AI is expert, domain-specific data, not model size.
Takeaway: Robots fail on edge cases, and edge cases are a data problem before they are a hardware problem. When a 68,000-person services firm pays this much for a labeling shop, it signals that the training-data supply chain is becoming strategic infrastructure, worth asking about in any robot vendor you evaluate.
News
John Deere Invests in Field Autonomy Through the Downturn
Snapshot: Deere committed $10 million over three years to ag-robotics incubator Reservoir, in the same week it posted a third-quarter profit that beat expectations despite a multi-year slump in farm-machinery demand.
Breakdown:
Third-quarter net income came in at $1.379 billion, or $5.10 a share, and Deere raised full-year guidance to a range of $4.75 billion to $5 billion.
Its Production and Precision Agriculture unit, home to Deere's autonomous machines and smart-spraying systems, saw sales fall 6% and profit fall 9% on lower volumes.
The Reservoir money subsidizes startup participation and connects founders with growers and farm operations across California, Arizona and other agricultural regions, lowering the barrier to testing rugged AI in real fields.
Deere is framing fiscal 2026 as the trough of the cycle and using it to invest through the bottom rather than pull back.
Takeaway: A blue-chip industrial spending into a downturn tells you where it sees the next decade. For operations leaders the read is that precision autonomy is moving from pilot to procurement in agriculture, and the vendors being funded now are the ones you will compare on a spec sheet in two years.
▶ Operator's Playbook
Before you sign for any humanoid or mobile robot this quarter, put three questions in the contract. What is the vendor's coordinated vulnerability disclosure policy, what is the firmware-patch turnaround when a root exploit like this week's Unitree flaws lands, and will the unit ship with Bluetooth provisioning and network access locked down by default. Then model the labor and downtime cost of pushing a firmware update across a full fleet, not just one demo unit. If the vendor cannot answer in writing, that is your answer.
Other Top Robot Stories
LGlined up partnerships with Nvidia, Palantir and Skild AI to build humanoid robots and AI factories under a group-wide "One LG" push.
UC Berkeley researchersopen-sourced the Humanoid Lite, a small humanoid built around cheap 3D-printed actuators to pull the cost of entry down.
Drexel University researchersfound in Science Robotics that socially expressive humanoids win more engagement but lose more trust once they make a visible mistake.
South Korea's Armystood up a tactical unit to demonstrate combat drones and ground robots as it rehearses future warfighting techniques.
German agricultural economistsreported field-robot adoption on farms stuck near zero to five percent, and argued that buying a robot and renting one as a service are two different decisions.
China's Changan, GAC, Li Auto, SAIC and Serespiled into humanoid development, chasing Tesla's bet that robots will out-earn thin-margin cars.
Free for subscribers
Deploying humanoids this year?
Our Facility Readiness Checklist walks your site before the robot arrives, 77+ items, one complete toolkit module.
The picture we keep in our heads is a robot that dances or folds a shirt. The week's real news was quieter: a factory address, a purchase order for training data, a patch that may or may not exist. A machine becomes ordinary the moment the interesting question stops being what it can do and starts being who keeps it running.
