Free tools Windows power users keep installed
One-click scans. No signup required.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
DJI Romo owners should update both the DJI Home app and their vacuumโs firmware. In February 2026, a researcher reportedly testing an unofficial PlayStation-controller app for his own Romo gained access to data from roughly 7,000 other devices across 24 countries. Reported capabilities included live camera video, microphone audio, home maps, cleaning routes and device telemetry.
The evidence shows a serious cloud-authorization failure and demonstrated unauthorized accessโnot proof that thousands of homes were actively watched, recorded or attacked by criminals.
What happened
According to Malwarebytes, researcher Sammy Azdoufal was trying to control his own DJI Romo with a PS5 controller. While reverse-engineering communication between the vacuum and DJIโs cloud services, his application reportedly received responses associated with other Romo units.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Reports put the accessible population at approximately 6,700 to 7,000 vacuums across 24 countries. The differing totals are best treated as rounding or differences in how the accessible devices were countedโnot as evidence of exactly 7,000 confirmed household victims.
#1 Best Overall
- ๐๐จ๐๐๐ซ๐๐ฎ๐ฅ ๐๐ฅ๐๐๐ง๐ข๐ง๐ ๐๐ฒ๐ฌ๐ญ๐๐ฆ: With 22000Pa HyperForce suction and Zero-Tangling Design, the Roborock Qrevo CurvX robot vacuum and mop conquers tough challenges including deep carpet debris, stubborn floor gap residue, pet fur, and long hair up to 40cm. You can freely select different mopping and vacuuming modes on the app to clean your home.
- ๐๐๐ฌ๐ข๐ ๐ง๐๐ ๐ญ๐จ ๐๐๐๐๐ก ๐๐ก๐๐ซ๐ ๐๐ฎ๐ฌ๐ญ ๐๐ข๐๐๐ฌ: The Roborock Qrevo CurvXโ the slimmest Roborock yet, only 7.98 cm, is designed for unreachable spots under sofas and cabinets, capturing hidden dust and delivering a deeper, more thorough clean.
- ๐๐ยฐ๐ ๐๐จ๐ญ ๐๐๐ญ๐๐ซ ๐๐จ๐ซ ๐๐ซ๐ฎ๐ฅ๐ฒ ๐๐ฅ๐๐๐ง ๐๐จ๐ฉ๐ฌ: The Roborock Qrevo CurvX uses 80ยฐC hot water to dissolve stubborn stains and grease, ensuring your mops are thoroughly cleaned and hygienic with every use.
- ๐๐๐๐๐ญ๐ข๐ฏ๐ ๐๐ ๐๐๐ฌ๐ญ๐๐๐ฅ๐ ๐๐๐๐จ๐ ๐ง๐ข๐ญ๐ข๐จ๐ง: With structured light and an RGB camera, the robot intelligently detects and avoids 108 types of objects, seamlessly navigating around obstacles in both well-lit and dark spacesโno need to clear your floor beforehand.
- ๐๐ง๐๐ฎ๐ฌ๐ญ๐ซ๐ฒ-๐ ๐ข๐ซ๐ฌ๐ญ ๐๐๐๐ฉ๐ญ๐ข๐๐ข๐๐ญ ๐๐ก๐๐ฌ๐ฌ๐ข๐ฌ: The Roborock AdaptiLift Chassis technology brings a new level of versatility, allowing the robot to lift its entire chassis to 4cm max or adjust individual sectionsโfront, rear, left, or rightโbased on the terrain. Whether tackling high thresholds or effortlessly maneuvering around furniture legs, it adapts seamlessly to your home's layout, enabling smooth, uninterrupted cleaning. (roborock was the first in the robot vacuum industry to mass-produce a product featuring a liftable chassis system with three-wheel control, officially launching this technology in Q3 2024.)
The researcher reportedly notified DJI and limited testing to what was needed to demonstrate the problem. This was not described as a conventional brute-force attack. The apparent issue was that DJIโs backend did not consistently enforce the boundary between one authenticated device and other devices.
What information was reportedly exposed?
Coverage from Vacuum Wars, Android Authority and Tomโs Hardware says the reported access included:
- Live video from the Romoโs onboard camera.
- Microphone audio.
- Two-dimensional home maps and cleaning routes.
- Battery levels, serial numbers and other device telemetry.
- Location information inferred from network data, according to some reports.
- Remote interaction with affected devices.
The researcher reportedly demonstrated access to live video and audio. That establishes a capability, not continuous surveillance of every affected home. Available reporting does not prove that all cameras were viewed, that recordings were retained or distributed, that criminals exploited the issue, or that customer credentials were stolen.
Rank #2
- Robot Vacuum Self-Emptying, App, Alexa & Google Assistant for Pet Hair, Carpet & Hard Floor
Why the flaw mattered
Technical accounts describe the problem as a backend permission-validation failure involving MQTT-based communication between Romo devices and DJIโs cloud infrastructure. In plain English, a token that should have identified and authorized one vacuum reportedly allowed access to data associated with many others.
This distinction matters: the incident was primarily an access-control failure, not necessarily a failure of encryption during transmission. Encrypted traffic can still protect the wrong data if a server incorrectly decides what an authenticated client is allowed to access.
Compiutaโs analysis and other coverage also described a separate reported issue involving camera access without the Romoโs security PIN. The full technical details were reportedly withheld, so that claim should not be treated as independently verified beyond the published accounts.
Rank #3
- ๐ฏ๐ฌ,๐ฌ๐ฌ๐ฌ๐ฃ๐ฎ ๐๐๐๐ฆ๐ง ๐ฆ๐จ๐๐ง๐๐ข๐ก โ ๐๐๐๐๐ก ๐ ๐ข๐ฅ๐ ๐๐ก ๐ข๐ก๐ ๐ฃ๐๐ฆ๐ฆ: Weak suction leaves dirt behind. BLAST 30,000Pa high-airflow suction lifts dust, pet hair, and crumbs from carpets and hard floors in one goโcleaning faster with fewer repeat passes.
- ๐ฅ๐๐๐ ๐ฆ๐๐ฅ๐จ๐๐๐๐ก๐ ๐ช๐๐ง๐ ๐ข๐ญ๐ ๐ข ๐ฅ๐ข๐๐๐๐ฅ ๐ฏ.๐ฌ โ ๐ก๐ข๐ง ๐ฃ๐๐ ๐ฆ๐ ๐๐๐ฅ๐๐ก๐: Pads wipe, they donโt scrub. OZMO ROLLER 3.0 uses a 10.6-inch self-washing roller with continuous, pressurized scrubbing to lift sticky spills, dried stains, and kitchen grimeโremoving mess instead of spreading it.
- ๐๐ก๐ฆ๐ง๐๐ก๐ง ๐ฆ๐๐๐-๐๐๐๐๐ก๐๐ก๐ ๐ข๐ญ๐ ๐ข ๐ฅ๐ข๐๐๐๐ฅ ๐ ๐ข๐ฃ, ๐๐๐ช๐๐ฌ๐ฆ ๐ ๐ข๐ฃ ๐ช๐๐ง๐ ๐๐๐๐๐ก ๐ช๐๐ง๐๐ฅ: Dirty pads re-soil floors. Pressurized self-washing with fresh-flow rinsing cleans the roller in real time, so it always mops with clean waterโpreventing streaks, residue, and secondary contamination from start to finish.
- ๐ง๐ฅ๐จ๐๐๐๐ ๐ฏ.๐ฌ โ ๐๐๐๐๐ก ๐ง๐๐ ๐๐๐ฆ๐ง ๐๐ก๐๐: Edges are often missed. TruEdge 3.0 extends the roller 0.6 inches beyond the body, gliding along baseboards and corners to remove dust lines where side brushes canโt scrub.
- ๐ญ๐๐ฅ๐ข๐ง๐๐ก๐๐๐ ๐ฐ.๐ฌ โ ๐๐จ๐๐๐ง ๐๐ข๐ฅ ๐๐๐๐ฅ & ๐ฃ๐๐ง๐ฆ: Tired of hair tangles? BLAST airflow guides hair directly into suction, while ZeroTangle 4.0 helps prevent wrappingโless maintenance, more consistent cleaning power.
What DJI reportedly did
According to reporting summarized by Guru3D, DJI acknowledged a backend permission-validation issue and began automatic remediation around February 8, 2026. A further update was reportedly completed around February 10.
Tomโs Hardware also reported that DJI paid the researcher a $30,000 bug bounty.
These dates and the bounty are based on secondary reporting. The available material does not provide a clearly identifiable DJI security bulletin confirming the affected firmware range, a complete customer-notification record, historical-token invalidation, deletion of exposed data or an independently auditable fleet-wide remediation.
Rank #4
- ๐ฏ.๐ญ๐ฐ-๐๐ป๐ฐ๐ต ๐จ๐น๐๐ฟ๐ฎ-๐ง๐ต๐ถ๐ป ๐๐ฒ๐๐ถ๐ด๐ป: The Roborock Saros 10R redefines home cleaning with its ultra-slim 3.14-inch profile. Powered by the advanced StarSight Autonomous System 2.0, it eliminates the need for a raised LDS unit, unlike traditional bulky robot vacuums. It easily glides under beds, sofas, cabinets, and coffee tables, reaching hard-to-clean areas with precision. Perfect for homes that value both efficiency and elegance, it offers superior cleaning coverage in a sleek, compact design.
- ๐ฆ๐๐ฎ๐ฟ๐ฆ๐ถ๐ด๐ต๐ ๐๐๐๐ผ๐ป๐ผ๐บ๐ผ๐๐ ๐ฆ๐๐๐๐ฒ๐บ ๐ฎ.๐ฌ: Experience smarter cleaning with advanced 3D sensing technology, enabling precise mapping even under narrow-legged furniture and suspended cabinets. The innovative VertiBeam Lateral Obstacle Avoidance system navigates cables and irregular furniture with ease, cleaning along cords without manual intervention. Enhanced algorithms detect and adapt to 108 obstacle types, ensuring seamless and efficient cleaning across every corner of your home.
- ๐ฃ๐ผ๐๐ฒ๐ฟ๐ณ๐๐น ๐๐น๐ฒ๐ฎ๐ป๐ถ๐ป๐ด ๐ฆ๐๐๐๐ฒ๐บ: With 22,000 Pa HyperForce suction, the Roborock Saros 10R effortlessly removes dirt, hair, and debris from all floor types, including hardwood, tile, and carpets. The Zero-Tangling DuoDivide Main Brush and FlexiArm Riser Side Brush ensure no hair tangles, even with long hair or pet fur. Additionally, the anti-tangle omnidirectional wheels eliminate the need for manual hair removal, significantly boosting cleaning efficiency and making maintenance effortless.
- ๐๐ผ๐ฟ๐ป๐ฒ๐ฟ ๐ฎ๐ป๐ฑ ๐๐ฑ๐ด๐ฒ ๐๐น๐ฒ๐ฎ๐ป๐ถ๐ป๐ด: The FlexiArm Riser Side Brush & Mop automatically extends to reach difficult corners and low spaces under furniture, sweeping away dust with ease. As it detects corners and edges, the mop extends to provide thorough, efficient cleaning. This design ensures comprehensive coverage, effectively eliminating blind spots and leaving every area spotless.
- ๐๐ป๐ฑ๐๐๐๐ฟ๐-๐๐ถ๐ฟ๐๐ ๐๐ฑ๐ฎ๐ฝ๐๐ถ๐๐ถ๐ณ๐ ๐๐ต๐ฎ๐๐๐ถ๐: The innovative AdaptiLift Chassis, featuring left/right wheels and omnidirectional wheels, effortlessly navigates obstacles up to 4 cm high, including thresholds and U-shaped furniture legs. When carpets are detected, the Dual Spinning Mops and mop bracket automatically lift to prevent wetting long-pile carpets. During recharging, the main and side brushes are raised to avoid dirt transfer onto the floor, delivering a quiet and pristine mopping experience.
As of August 18, 2026, the incident should be treated as patched or mitigated according to available reportingโnot as proof that every Romo device worldwide is permanently secure. DJIโs April 13, 2026 release notes list firmware version V01.00.15, but they should not be treated here as proof that this is the definitive fix for every model and region. See the English release notes and check regional support information.
What Romo owners should do now
- Update the DJI Home app through the deviceโs normal app store.
- Check Romo firmware inside the official app and install the newest version offered for your model and region.
- Restart the vacuum after updating and confirm that it reconnects normally.
- Review privacy controls for the camera, microphone, remote viewing, maps and cloud sharing.
- Disable camera or microphone functions when they are not needed, if your model and app support that control.
- Use a unique DJI account password. Change it if it has been reused elsewhere.
- Enable multifactor authentication if the feature is available for your account and region.
- Remove unofficial companion apps and scripts that connect to Romo cloud services, then review connected-account access.
- Factory-reset the vacuum before selling or returning it and unbind it from the DJI account. A reset may not delete cloud-stored history, so ask DJI about deletion separately.
- Contact DJI support if the vacuum shows unexplained camera activation, unknown account activity, unexpected remote commands or repeated update failures.
A password change improves account security but cannot repair a server-side authorization defect by itself. The primary remedy for this incident is the manufacturerโs backend, app and firmware remediation.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Important edge cases
Firmware and app availability can vary by country. Mainland-China purchases, imported or grey-market units may have different activation, cloud and update behavior from officially supported products. An app saying that firmware is current does not necessarily establish that every backend component is updated.
Best Value
- Self-Cleaning Mop with FlowWash โ Always Cleans with Fresh Water. Tired of robot mops spreading dirty water? This robot vacuum and mop combo continuously washes its track mop in real time, so only clean water touches your floors. With up to 7x more contact area and 15x longer stain scrubbing, it cleans deeper with every pass. 140ยฐF hot water loosens dirt, 12N pressure scrubs it away, while a scraper removes residue and dirty water is collected into a sealed tank.
- 31,000Pa Suction for Pet Hair + Dual Tangle-Free Brush System. This robot vacuum for pet hair delivers 31,000Pa suction power to lift dust, crumbs, debris, and pet hair from hard floors and carpets. Its Dual Zero-Tangle System combines dual short rollers with an upgraded long-bristle side brush to reduce hair wrap and support a 0% hair entanglement rate, certified by SGS, making it ideal for homes with pets or long hair.
- AI Object Recognition with Dual Cameras โ Avoids Obstacles, Cleans Smarter. Powered by dual cameras and an advanced VLM AI brain, Flow 2 goes beyond basic obstacle avoidance. It recognizes common household objects like shoes, cables, and pet bowls in real time, then adjusts its path for smarter cleaning with fewer bumps and less getting stuck.
- Adapts to Pets, Kids, and Everyday Life. Flow 2 intelligently responds to your home environment. It can lower noise near a crib for quieter cleaning and supports interactive pet features through the app, including playful sounds and pet locating support. The result is a more responsive robot vacuum and mop that fits your familyโs daily routine with less interruption.
- Smart Light Bar โ Status Updates at a Glance. No need to open the app or walk over to the dock. This vacuum mop combo features a built-in smart light bar that communicates cleaning, charging, drying, and alerts through clear color cues, so you always know whatโs happening.
Blocking the vacuumโs internet access can reduce cloud exposure, but it may also disable remote control, map synchronization, firmware updates and support diagnostics. If you use router isolation, place the vacuum on a guest or smart-home network and understand which features will stop working.
Camera-equipped vacuums are especially sensitive in bedrooms, home offices and other spaces where video, audio, floor plans or occupancy patterns reveal more than a normal appliance would.
Should you buy a camera-equipped robot vacuum?
This incident does not prove that every camera-equipped robot vacuum is unsafe, nor does it establish that a competing brand is automatically more private. It does show why a robot vacuum with a camera, microphone, detailed map, cloud account and remote access should be evaluated as a mobile smart-home sensorโnot merely as a cleaner.
Before buying, check the exact model for:
- Camera and microphone presence.
- Local processing versus cloud processing.
- A physical camera shutter or only software controls.
- Clear camera and microphone indicators.
- Local-only or offline operation.
- Where maps and video are stored, and how they can be deleted.
- Multifactor authentication and account controls.
- Security advisories, bug-bounty support and firmware-update history.
- Regional warranty and long-term update support.
Features such as camera-based obstacle recognition, pet detection and remote monitoring can improve convenience and cleaning performance. The trade-off is that the same sensors may expose interior layouts, routines, video, audio and information about children, pets, visitors or security arrangements.
The broader smart-home lesson
The Romo report illustrates how a cloud authorization mistake can expose an entire device population even when users have not chosen weak passwords. Security depends not only on login protection or encrypted connections, but also on strict server-side permissions, token handling, update delivery and vendor disclosure.
Owners who do not need remote video or audio should leave those features disabled. Buyers who require the strongest privacy should favor models that offer camera-free operation, local processing, physical shutters, transparent data-deletion controls and continued security support.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Leave a Reply