Science & Tech · Cybersecurity · 3 hrs ago
Robot vacuums can collect detailed data about your home
Connected robot vacuums can collect detailed information about your home, including floor maps, cleaning activity and objects they detect.
Some models also have microphones or cameras, and the data they collect and where it goes varies by product.
Cloud-connected models may send information through manufacturers’ servers, so buyers may want to check what is collected and why.
In one security incident, a user trying to control his DJI Romo vacuum gained access to about 7,000 vacuums around the world.
The problem was a failure to limit access to each user’s own device, not the use of AI or a weak password.
DJI says it fixed the issue with two updates on February 10, 2026.
Buyers can look for on-device processing and avoid models that require cloud features, while remembering that a camera-free vacuum may still collect maps and account information.
Robot vacuums can collect detailed information about a home, including floor maps, cleaning histories and detected objects.
Some models also have microphones or cameras that allow remote video viewing.
The information collected and where it goes vary by model, and connected vacuums may communicate through manufacturers’ servers.
A security flaw in DJI’s system once allowed a customer to access about 7,000 robot vacuums instead of only his own.
- Who
- Robot vacuum owners may have data collected about their homes. Sammy Azdoufal found a flaw affecting DJI Romo vacuums.
- What
- Robot vacuums may collect home-related data, and a DJI backend permission issue allowed access to other users’ devices.
- When
- DJI issued two updates on February 10, 2026, to address the permission issue.
- Where
- The affected devices were robot vacuums around the world.
- Why
- The article says the security issue occurred because the server did not restrict a legitimate customer to his own device.
This story does not have two clearly opposing sides.
Sammy Azdoufal found he could control and access roughly 7,000 DJI Romo vacuums while trying to control his own.
DJI issued two updates to resolve the backend permission issue.
- Devices affected
- Roughly 7,000 DJI Romo vacuums
- Security updates
- Two updates
- Update date
- February 10, 2026
- Potential data collected
- Floor maps, cleaning histories, device status and detected objects
- Data handling
- Collection and sharing vary by model