Yarbo Confirms Critical Security Flaws After Hacker Runs Over Journalist With Robot Mower
A security demonstration turned into a real-world attack when a hacker remotely commandeered a Yarbo robot lawn mower and ran over a journalist, exposing critical vulnerabilities in thousands of the Chinese-made devices. The incident revealed that Yarbo's bladed robots could be hijacked with minimal effort, potentially exposing users' GPS coordinates, Wi-Fi passwords, email addresses, and other sensitive data to any casual attacker within range.
Yarbo has now issued a comprehensive 1,200-word response confirming the security researcher's findings and apologizing for the failures. The company acknowledged that its devices contained serious security gaps and outlined a detailed remediation plan. Yarbo stated it has already temporarily disabled remote access to the mowers and is working to address what it called its "self-created security issues." The confirmation validates concerns that the company's products posed both physical danger and significant privacy risks to owners.
The breach raises broader questions about security standards in the consumer robotics market, particularly for devices that combine internet connectivity with physical capabilities like spinning blades. Yarbo's rapid response suggests the company recognizes the severity of the exposure, but the incident demonstrates how easily IoT devices can become weapons when manufacturers neglect basic security architecture. The company's remediation plan will be closely watched by owners and security researchers alike. For thousands of Yarbo customers, the episode means their home networks and location data may have been accessible to anyone who knew where to look.