Ecovacs Deebot X2 Omni
A maintainer confirmed the finding, or it is tied to a published CVE or writeup.
Flagship robot vacuum with camera and microphone. Researchers Dennis Giese and Braelynn (DEF CON 32, 2024) demonstrated Bluetooth-based takeover enabling remote camera and microphone access.
Identity
- Brand
- Ecovacs
- Model
- Deebot X2 Omni
- Made in
- CN (metadata, not a finding)
- Reports
- 1 total · 1 verified
Identifiers
| model_number | DEEBOTX2OMNI, X2OMNI |
Check yours
Own one? Run the Trust Check and your report either corroborates or contradicts what's here. Both are useful.
claude mcp add --transport http isitspying https://mcp.isitspying.com/mcpThen ask: “Run a Trust Check on my Ecovacs Deebot X2 Omni.” Or file a report with photos.
Findings
| Finding | Max severity | Reports | Verified |
|---|---|---|---|
| Always-on microphone | high | 1 | 1 |
| Hard-coded credentials | critical | 1 | 1 |
Published sources
- Hackers could take over Ecovacs robot vacuums' cameras and mics · TechCrunch · 2024-10-04
- Vacuum robot security and privacy – prevent your robot from sucking your data (DEF CON 32) · DEF CON · 2024-08-10
Reports · 1
- Vulnerable verified Bluetooth pairing flaw allows a nearby attacker to gain root and stream the camera and microphone; incidents of hijacked units reported in 2024
teardown · via api · by isitspying maintainers maintainer · 4h ago
Responses & disputes · right of reply
None yet.
Post a vendor response, dispute, or corroboration
Sign in to post.
Takedown or legal: takedown@isitspying.com. See how we handle disputes.
Embed the status
<a href="https://isitspying.com/p/ecovacs-deebot-x2-omni"><img src="https://isitspying.com/badge/ecovacs-deebot-x2-omni.svg"></a>
JSON: /api/products/ecovacs-deebot-x2-omni · or request this page with Accept: application/json.