Recently, Chinese robot vacuum cleaner company Ecovacs Robotics announced a security issue related to some of its robot vacuum cleaner models, which could allow these devices to be remotely controlled.
Ecovacs Robotics has now released a software update to patch the vulnerability for all of its robot vacuum models, with the exception of the Deebot X2, which was updated in August 2024 to block the issue entirely. Another update is expected in November 2024 to completely fix the Deebot X2 issue.

The company also recommends that users quickly update the software via the Ecovacs application to ensure that the user's device operates stably and optimizes security. In addition, Ecovacs also encourages users to set up separate passwords for each account and change passwords regularly.

Using the Ecovacs app, Swenson discovered that an intruder was trying to access the robot’s camera and remote control features. He then changed the password and restarted the device.
The Swensons’ robot vacuum cleaner is located on the same floor as the family’s shared bathroom. Swenson said the situation could have been worse if hackers had hacked into the device to spy on the family without uttering a single curse word.
Concerned for his family's safety and privacy, he decided to put the robot in the garage and not use it again.

At the same time, another Deebot X2 was hijacked and began chasing a family’s dog in Los Angeles, while also hurling insults.
Similar incidents occurred in several cities across the United States in May, when hackers repeatedly took control of robot vacuum cleaners and continuously broadcast offensive words through the built-in speakers on the robots. All of the attacked devices were Deebot X2 robot vacuum cleaners from Ecovacs Robotics.
Many security experts have warned Ecovacs Robotics about security vulnerabilities in the robot and its smartphone control application. The most serious of these is the Bluetooth connection issue that allows strangers to control the robot within a range of up to 100 meters.