Shark Robot Vacuum Flaw Lets Attackers Take Over Other Vacuums Remotely

A researcher known as tokay0 published a method exploiting an unpatched flaw in Shark RV2320EDUS robot vacuums. By extracting a certificate from the device's flash, attackers can execute root commands on other Shark vacuums in the same AWS region. The exploit enables camera access, robot control, home map retrieval, and plaintext Wi-Fi password theft.