Security Flaw in DJI Romo Robovac Allowed One User to Access Thousands Remotely

Sammy Azdoufal insists he wasn’t on a mission to hack every robot vacuum out there. His goal was simply to control his new DJI Romo vacuum using a PS5 gamepad, which he thought would be a fun challenge. However, when his custom remote control app began communicating with DJI’s servers, it unexpectedly connected to around 7,000 vacuums worldwide, all responding to him as if he were their commander.

He discovered he could not only control these vacuums remotely but also access their live camera feeds. He tested this with a friend, watching as the robots mapped out rooms and created detailed 2D floor plans. By using the IP address of any robot, he could pinpoint its approximate location. “I found my device was just one in an ocean of devices,” he remarked.

During a live demonstration, I was astounded by the level of access he had. Hundreds, if not thousands, of robots were sending data packets every few seconds, reporting their serial numbers, cleaning progress, battery life, and obstacles encountered. In just nine minutes, Azdoufal’s laptop had identified 6,700 DJI devices across 24 countries and collected over 100,000 messages. Including DJI’s portable power stations, he had access to over 10,000 devices.

At first, I was skeptical. Azdoufal, who leads AI strategy at a vacation rental company, claimed he reverse-engineered DJI’s protocols using Claude Code. To verify, I asked a colleague who had just reviewed the DJI Romo for its serial number. With just that 14-digit number, Azdoufal could not only locate our robot but also see it was cleaning the living room with 80% battery remaining. Within minutes, he generated and transmitted an accurate floor plan of my colleague’s house, all from a laptop in another country.

He even accessed his own DJI Romo’s live video feed without needing its security PIN, waving at the camera while I watched. He shared a limited version of his app with an IT consultant in France, who confirmed he could view his own Romo’s camera feed before even pairing it.

Azdoufal asserts he didn’t hack into DJI’s servers. “I didn’t infringe any rules, I didn’t bypass, I didn’t crack, brute force, whatever.” He simply extracted his own Romo’s private token, which granted him access to his data, but inadvertently also to thousands of others. He demonstrated access to DJI’s pre-production server and live servers for the US, China, and the EU.

Fortunately, when Azdoufal showcased his findings, he couldn’t take control of our DJI Romo or access its camera and microphone. DJI had already restricted that type of access after being informed about the vulnerabilities. By the next morning, Azdoufal’s scanner could no longer access any robots, indicating DJI had closed the security gap.

This incident raises significant concerns about DJI’s security and data practices, potentially reinforcing fears that have led to the company facing scrutiny in the US. If Azdoufal could discover these robots so easily, what safeguards are in place against those with malicious intent? If AI can create an app that allows someone to see into another’s home, what prevents a DJI employee from doing the same? And why does a robot vacuum need a microphone? “It’s so weird to have a microphone on a freaking vacuum,” Azdoufal pointed out.

When Azdoufal and I reached out to DJI about the issue, the company claimed the vulnerability had been fixed, though it was only partially resolved at that time. In a statement, DJI acknowledged a backend permission validation issue that could have allowed unauthorized access to live video from its vacuums, admitting that it didn’t fully patch the problem until after we confirmed ongoing issues.

To clarify, it’s not unusual for a robot vacuum with a smartphone app to connect to the cloud. Users expect these apps to function outside their homes, which typically requires data to be relayed through cloud servers. However, those who install cameras in their homes expect their data to be secure during transmission and once it reaches the server. Security experts should recognize this, yet when Azdoufal connected to DJI’s MQTT servers, everything was visible in cleartext. If DJI has merely blocked one access point, it may not be sufficient to protect against other potential vulnerabilities.

Sadly, DJI isn’t the only smart home company that has faced security issues. In 2024, hackers took control of Ecovacs robot vacuums to harass pets, and in 2025, South Korean agencies reported vulnerabilities in Dreame’s X50 Ultra that allowed hackers to view its camera feed. Other brands have also faced scrutiny for similar issues.

Azdoufal believes that even now, DJI hasn’t addressed all the vulnerabilities he discovered. One allows users to view their own Romo video stream without needing the security PIN. Another is serious enough that he won’t disclose it until DJI has more time to address it. DJI has not committed to fixing these issues.

Both Azdoufal and security researcher Kevin Finisterre emphasize that simply encrypting data sent to a US server isn’t enough if anyone with access to that server can easily read it. “A server being based in the US in no way, shape, or form prevents .cn DJI employees from access,” Finisterre noted, highlighting that Azdoufal, living in Barcelona, could see devices in different regions.

“Once you’re an authenticated client on the MQTT broker, if there are no proper topic-level access controls, you can subscribe to wildcard topics and see all messages from all devices in plaintext,” Azdoufal explained. “TLS only protects the pipe, not what’s inside the pipe from other authorized participants.”

When I mentioned that some might criticize him for not giving DJI more time to resolve the issues before going public, he pointed out that he didn’t hack anything, expose sensitive data, and isn’t a security professional. He was simply sharing his experience while trying to control his robot with a PS5 gamepad. “Yes, I don’t follow the rules, but people stick to the bug bounty program for money. I just want this fixed,” he stated. “Following the rules would probably have prolonged this breach.”

He’s skeptical that DJI discovered these issues on its own back in January and is frustrated that the company only responded to him in a robotic manner on social media instead of addressing his emails directly. However, he is pleased that he can indeed control his Romo with a PlayStation or Xbox gamepad.