DJI Romo Cloud Authorization Bug Reportedly Exposed Camera, Microphone, and Home-Mapping Data From Nearly 7,000 Robot Vacuums
Date: 2026-02-08
Affected: Dji
Attack vector: data-exfiltration
Category: real-world
Severity: High

AI Incident Database (AIID) entry #1389: DJI Romo Cloud Authorization Bug Reportedly Exposed Camera, Microphone, and Home-Mapping Data From Nearly 7,000 Robot Vacuums. Alleged deployer/developer: Dji. See the linked AIID entry for full narrative, sourcing, and classification.


Mitigations:

Architectural layers (MAESTRO):