---
id: 7584
title: "James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/kettle-ai-innovation-crlf-robots"
published_at: "2026-09-15T12:39:00Z"
tags: ["ai-security", "rce", "http-desync", "request-smuggling", "css-injection", "research-roundup", "crlf", "robotics"]
phying_url: "https://phying.com/item/7584"
lang: en
---

# James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup

## Summary

This roundup covers James Kettle's autonomous research cascade, CRLF-powered desync attacks, a CSS bomb in webmail, and unauthenticated root RCE on Unitree G1 robots.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2026-09-15T12:39:00Z
- **Original:** https://www.yeswehack.com/news/kettle-ai-innovation-crlf-robots
- **Phying News:** https://phying.com/item/7584