Disclosed vulnerability
DJI Romo cloud credentials granted one owner access to live camera, microphone and home-map data from nearly 7,000 other robot vacuums in 24 countries
AIR-2026-0035 AIR record · 2026-02-dji-romo-cloud-authorization-exposure
From the supporting source
But he soon discovered that the same credentials that allowed him to see and control his own device also provided access to live camera feeds, microphone audio, maps, and status data from nearly 7,000 other vacuums across 24 countries.popsci.com
The record
Disclosed
2026-02-08
Occurred
2026-02
Vendor
DJI
Product
DJI Romo robot vacuum
Risk domain
Privacy › Sensitive data exposure
System type
Not AI
Who acted
AI was the target — broken cloud authorization exposed camera, mic and map data
Attack surface
Computer-use agent
Autonomy level
Semi-autonomous
Initial vector
Broken authorization cloud api
Impact type
Privacy violation, Information disclosure
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI06 – Memory & Context Poisoning
- MITRE ATLAS
- AML.T0057 – LLM Data Leakage
- NIST AI RMF
- MEASURE 2.10
- EU AI Act
- Article 10
- ISO/IEC
- TR 24028; 23894
- AIUC-1
- A. Data & Privacy
- Scope
- tool misuse
- Mitigation
- Use data anonymization; Implement log sanitization to scrub PII.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
nearly 7,000 devices across 24 countries; live camera feeds, microphone audio, floor maps and status data
Capability abused
Defense & remediation
Recorded defense
per-device cloud credential scoping
Guardrail kinds
Unknown
Guardrail outcome
Silent
Fix shipped
reported to DJI
Taxonomy & references
Curator notes
Two agent stories in one. The vulnerability is a plain authorization failure in an embodied agent that owns a camera, a microphone and a floorplan of your house — the same exposure class as the 2024 Ecovacs record. The discovery is the newer part: Sammy Azdoufal found it with an AI coding assistant while trying to drive his vacuum with a game controller, which is what changes about vulnerability discovery when reverse engineering costs an afternoon. impact_realized false — researcher access only, disclosed to the vendor. AI Incident Database incident 1389.
Supporting sources
Cite as
Enkrypt AI. "DJI Romo cloud credentials granted one owner access to live camera, microphone and home-map data from nearly 7,000 other robot vacuums in 24 countries". AIR, AIR-2026-0035. https://agentincident.vercel.app/i/AIR-2026-0035/ (accessed 2026-10-19).