Yarbo Issues Firmware Fix for Robot Mower Takeover Flaws

Robot mowers sold under Hanyang Technology’s Yarbo brand contain serious firmware flaws that could turn a connected garden appliance into both a surveillance tool and a physical safety threat. The vulnerabilities could allow a remote attacker to take control of a machine, access its camera feed and potentially restart the cutting blades, raising risks that extend beyond data privacy to people near the device.

Three vulnerabilities disclosed in 2026 — CVE-2026-7413, CVE-2026-7414 and CVE-2026-7415 — were identified as possible routes for remotely compromising Yarbo machines. The company has acknowledged that the security issues are genuine and released updated firmware to address them, though the available event details do not specify the firmware version or release date. Yarbo is urging customers to install the update immediately to reduce their exposure to attack.