A single bug unlocked thousands of DJI Romo vacuums, exposing live feeds and floor plans

An investigation shows a back-end permission flaw in DJI’s Romo system allowed a researcher to access roughly 7,000 robot vacuums (and up to 10,000 related devices) worldwide, remotely control them, view live video, and map rooms before DJI patched the flaw in early February. The episode raises questions about smart-home security and data practices, even though traffic was encrypted and DJI says the issue is resolved and that the vulnerability was rare beyond researchers testing their own devices.