cnbc.com web signal

Hesai Deepens U.S. Push via Nvidia Deal Despite Pentagon List

TL;DR

  • Hesai, a Shanghai lidar maker blacklisted by the Pentagon in 2024, is now a qualified sensor option inside Nvidia's DRIVE Hyperion architecture.
  • The federal designation blocks U.S. government procurement but places no restriction on civilian buyers like Zoox, Waabi, Kodiak, and JFK Airport.
  • Security researchers warn compromised lidar can invent fake obstacles, hide real ones, and expose granular mapping data on U.S. infrastructure.

The interesting thing about the CNBC investigation is not the Pentagon designation, which has been in place since 2024. It is that a Shanghai-based lidar company on the Defense Department's Chinese military entity list has just become one of the sensor options inside Nvidia's DRIVE Hyperion autonomous vehicle architecture. Federal procurement is closed to Hesai; the civilian US market, CNBC reports, is wide open.

The partnership, announced at the Consumer Electronics Show in January, treats Hesai as one of several qualified suppliers on an "open, vendor-agnostic reference architecture," which is the phrasing Nvidia sent CNBC in place of specific answers on safeguards. CNBC says it put more than a dozen questions to Nvidia and did not get direct responses. Meanwhile Hesai already commands about a third of worldwide automotive lidar sales, and its hardware is running on Amazon's Zoox robotaxis, on Waabi and Kodiak autonomous trucks, and at passenger screening areas inside New York's John F. Kennedy International Airport.

The security case is not abstract. Duke professor Miroslav Pajic showed demonstrations of compromised lidar producing fictitious objects and making real physical obstacles vanish from the sensor's output. Craig Singleton, quoted in the piece, argues the granular mapping data these sensors collect could be turned against American infrastructure by a foreign adversary, and notes that Chinese statute gives Beijing authority to demand what companies like Hesai possess. Kodiak's counter is architectural, telling CNBC its system is designed so Hesai does not have access to data from its sensors. Whether the same holds across every other US buyer is not something the reporting settles.

The honest caveats: no specific breach is documented in the piece, the backdoor concern is potential rather than proven, and the reporting does not signal whether Congress or the White House is about to close the civilian loophole. That last variable is the one that would change every purchasing decision downstream.

The forward-looking read is that US autonomy is quietly becoming a two-tier market. Buyers who care about optionality will pay attention to how the Nvidia stack lets them swap sensor vendors, and to the other names already qualified inside the Hyperion ecosystem, including Aeva, who would benefit directly if the policy signal hardens.