DJI Romo Cloud Authorization Bug Reportedly Exposed Camera, Microphone, and Home-Mapping Data From Nearly 7,000 Robot Vacuums

A software engineer reportedly used an AI coding assistant while attempting to reverse-engineer his DJI robot vacuum so he could control it with a video game controller. In the course of that work, he reportedly said he discovered that credentials used to communicate with DJI's cloud servers could also grant access to data associated with nearly 7,000 other vacuums across 24 countries, including live camera feeds, microphone audio, maps, and status information.

Risk classification

• Primary risk domain: 2 Privacy & Security
• Primary risk subdomain: 2.2 AI system security vulnerabilities and attacks

The incident involved a critical backend security vulnerability in the DJI Romo's cloud infrastructure that exposed live camera feeds and microphone audio of nearly 7,000 devices, representing a major AI system security flaw.

Additional risk subdomains

• 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The security flaw exposed highly sensitive, non-public personal data including live camera feeds, microphone audio, and home floor plans of thousands of users.

Causal factors

• Entity: Human
• Intent: Unintentional
• Timing: Post-deployment

The security vulnerability was caused by an unintentional human programming error in DJI's cloud infrastructure, which was discovered post-deployment while the robot vacuums were active in users' homes.

EU AI Act risk tier

• Risk tier: 4 Minimal or No Risk

Risk Level 4: Minimal or No Risk. The DJI Romo is described as 'an autonomous home vacuum' used for household cleaning, which represents a consumer application posing minimal inherent risk to safety or fundamental rights under normal operation.

AI system and alleged parties

• AI system: None named
• AI purpose: Smart Devices; Navigation Assistant
• Behaviour type: Autonomous
• Alleged developer: DJI
• Alleged deployer: DJI
• Alleged harmed parties: DJI Romo owners

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Substantial, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Privacy

Reported: Yes, the report explicitly describes a security vulnerability that exposed highly sensitive personal data of users.

Directly caused: The backend security bug exposed live camera feeds, microphone audio, 2D floor plans, and approximate locations of nearly 7,000 robot vacuums globally, though no malicious party is reported to have accessed this data.

People affected

• Occurrences reported: 1
• People reportedly exposed: 7000

Potential causes

Management

• Inadequate IoT Risk Assessment: Management failed to prioritize security risks of cloud-connected cameras.

Technology

• Broken Backend Authentication: Servers granted access to 7,000 robots using a single credential token.
• AI-Assisted Code Exploitation: AI coding assistants made reverse-engineering backend protocols much easier.

Data Inputs

• Exposed Spatial Mapping Data: Sensitive 2D floor plans were accessible to unauthorized users.
• Unsecured Camera and Audio Feeds: Live video and microphone feeds were transmitted without proper authorization.

Human Factors

• Developer Credential Oversight: Backend developers failed to properly restrict token validation to single users.

Process and Methods

• Flawed API Security Validation: Lack of rigorous penetration testing allowed backend access bugs to persist.

Regulatory Environment

• Weak IoT Privacy Regulations: Absence of strict legal standards for smart home camera data security.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear details about the nature of the security vulnerability, the number of affected devices (nearly 7,000), the types of data exposed (camera, audio, maps), and the timeline of the patch (February 8 and 10, 2026). There is no conflicting information regarding whether the flaw was exploited.

A security vulnerability in DJI's cloud infrastructure exposed live feeds and floor plans of approximately 7000 robot vacuums globally. Discovered by a researcher using an AI coding assistant, the bug was patched by DJI without evidence of malicious exploitation. The incident highlights minor privacy risks associated with IoT devices rather than a significant national security threat.

• Overall national security impact: Minor
• Scope: Multiple nations
• Primary target: No clear primary
• Other affected: Global users across 24 countries
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The specific vulnerability has been patched by the manufacturer, removing any immediate threat.
• Autonomy: Human-supervised. The robot vacuum operates autonomously to map and clean homes, but is subject to human scheduling and oversight.
• Novelty: Established threat. Security vulnerabilities in internet-connected consumer smart devices exposing user data are well-established threats.

Impact by dimension

• Physical security: Negligible. The incident involved consumer robot vacuums with no kinetic capabilities, critical infrastructure control, or physical threat potential.
• Information security: Minor. Potential surveillance vector exposing cameras and audio from 7000 devices globally, but no evidence of exploitation by adversaries before it was patched.
• Sovereignty: Negligible. No government functions, electoral systems, or sovereign decision-making processes were targeted or affected.
• Economic security: Negligible. No significant threat to strategic industries, financial systems, or national technological competitive advantage.
• Societal stability: Minor. Privacy exposure of approximately 7000 users globally, but the vulnerability was resolved quickly without evidence of malicious exploitation.