7,000 Robot Vacuums, One Leaked Token: The DJI Romo Breach Proves Home Agents Have a Single-Point-of-Failure Problem
Sammy Azdoufal, an AI strategist based in Barcelona, was attempting to control his DJI Romo robot vacuum with a PS5 gamepad using Claude Code when he uncovered a critical security failure. By extracting his own device’s private API token, Azdoufal discovered that DJI’s MQTT broker allowed him to access approximately 7,000 other Romo vacuums across…