{"id":489535,"date":"2026-02-25T11:54:18","date_gmt":"2026-02-25T11:54:18","guid":{"rendered":"https:\/\/www.newsbeep.com\/us\/489535\/"},"modified":"2026-02-25T11:54:18","modified_gmt":"2026-02-25T11:54:18","slug":"someone-remotely-accessed-the-cameras-in-7000-dji-robot-vacuums","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us\/489535\/","title":{"rendered":"Someone Remotely Accessed the Cameras in 7,000 DJI Robot Vacuums"},"content":{"rendered":"

\"Two<\/p>\n

A man trying to control his DJI Romo vacuum with a PlayStation 5 controller inadvertently gained remote access to about 7,000 Romo vacuums worldwide, enabling him to see inside people\u2019s homes over the internet. <\/p>\n

As The Verge reported<\/a> earlier this month, Sammy Azdoufal built a remote control app to use his PS5 controller to control the DJI Romo. DJI released the Romo last year<\/a>, leveraging its expansive drone technology, including obstacle-detection imaging and binocular fisheye vision sensor. Azdoufal\u2019s app connected to DJI\u2019s global servers, granting him an incredible level of access. <\/p>\n<\/p>\n

Azdoufal told The Verge that he could remotely view and listen in on Romo vacuum camera systems worldwide, and even use an individual robot\u2019s IP address to track down its approximate location. Azdoufal even showed The Verge a live demo of his app in action, which could also connect to DJI Power portable battery stations. <\/p>\n

The Verge even tested it in real time, having Azdoufal try to find a unit that Thomas Ricker of The Verge recently reviewed. Sure enough, Azdoufal pulled up the robot using its serial number, obtained an accurate floor plan of Ricker\u2019s apartment, and accessed a live video feed. <\/p>\n

Although this all sounds very nefarious, Azdoufal claims he achieved this remarkable level of access without ever breaking any rules, bypassing security, or hacking anything. He took a private token from his own Romo, and, for whatever reason, DJI\u2019s servers granted him access to everything, including pre-production DJI servers. <\/p>\n

Oupss https:\/\/t.co\/lqUswFk8CU<\/a> pic.twitter.com\/jjgoIk86Lm<\/a><\/p>\n

\u2014 Sam (@n0tsa) February 6, 2026<\/a><\/p>\n

It is crazy. <\/p>\n

Even before The Verge saw Azdoufal\u2019s app in action, it told DJI about it, and the company said it had already fixed the security vulnerabilities. However, as evidenced by the live demo Azdoufal provided The Verge, that was not the case. Security vulnerabilities can be complicated and challenging to fix, of course, but it\u2019s concerning that something like this was even possible in the first place. <\/p>\n

This is far from the first time a piece of home tech has had security vulnerabilities<\/a>, and unfortunately, it is unlikely to be the last. <\/p>\n

However, The Verge puts it very well: \u201c\u2026 people who put a camera into their home expect that data to be protected, both in transit and once it reaches the server.\u201d <\/p>\n

As of now, there are still vulnerabilities with the DJI Romo, which DJI tells The Verge it will resolve in \u201cweeks.\u201d The publication and Azdoufal are fortunately keeping some of them under wraps until they are completely fixed. <\/p>\n

\u2028Image credits: DJI <\/p>\n