--- title: Shark vacuum flaw exposes cameras, home maps and Wi-Fi... description: A security researcher discovered an unpatched AWS IoT policy misconfiguration in Shark robot vacuums that allows a certificate stolen from one device to send... canonical: https://daily.dev/posts/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords-dw7t89t2b twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords | daily.dev og:description: A security researcher discovered an unpatched AWS IoT policy misconfiguration in Shark robot vacuums that allows a certificate stolen from one device to send... og:url: https://daily.dev/posts/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords-dw7t89t2b og:image: https://api.daily.dev/og/posts/dw7t89T2b.png og:image:alt: Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 4 min read · 3 upvotes · 0 comments ## Summary A security researcher discovered an unpatched AWS IoT policy misconfiguration in Shark robot vacuums that allows a certificate stolen from one device to send commands to any other Shark device in the same AWS Region. The overly permissive MQTT policy means an attacker with physical access to one vacuum could remotely access cameras, steal plaintext Wi-Fi passwords, and copy home floor maps from hundreds of thousands of other devices. During a 24-hour observation window, over 1.5 million unique Shark serial numbers were seen, with ~44% supporting remote command execution. SharkNinja has not patched the issue despite being notified more than six months ago. Owners are advised to disable remote features or disconnect the device from Wi-Fi until a fix is released. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the security vulnerability found in Shark robot vacuums' AWS IoT setup? Shark's embedded AWS IoT certificates are overly permissive, allowing a certificate extracted from one vacuum to publish and subscribe to MQTT topics belonging to any other Shark device in the same AWS Region. This lets an attacker with one stolen certificate remotely access other vacuums' cameras, steal plaintext Wi-Fi passwords, and copy home floor maps, according to researcher tokay0's analysis of a Shark RV2320EDUS unit. _Track how cloud IoT misconfigurations like this get disclosed and patched by following security coverage on daily.dev._ ### How many Shark IoT devices are affected by the AWS IoT cross-device access flaw? During a 24-hour observation window in a single AWS Region, researcher tokay0 recorded 1,517,605 unique Shark device serial numbers, of which about 673,816 (roughly 44%) responded in a way indicating support for remote command execution, suggesting a very large number of SharkNinja IoT devices are affected across just that one region. _Developers weighing IoT cloud architecture risks can keep up with incidents like this on daily.dev._ ### Has SharkNinja fixed the AWS IoT vulnerability affecting its robot vacuums? No, according to the researcher who discovered it, SharkNinja had not fixed the vulnerability despite being notified more than six months earlier. Because the flaw lies in server-side AWS IoT policy configuration rather than device firmware, owners cannot patch it themselves and are advised to disable remote control features or disconnect affected vacuums from Wi-Fi until SharkNinja issues a fix. _Anyone owning connected devices with unresolved vendor vulnerabilities can follow disclosure updates via daily.dev._ ## Similar posts on daily.dev - [Shark Vacuum Vulnerability Lets Attackers Hijack Cameras Across an Entire AWS Region](https://daily.dev/posts/shark-vacuum-vulnerability-lets-attackers-hijack-cameras-across-an-entire-aws-region-5gquma1jc) · Latest Hacking News · 2 upvotes · 1 comments - [Schneier on Security](https://daily.dev/posts/schneier-on-security-sjoldf7cj) · Schneier on Security · 0 upvotes · 0 comments - [Connected & Compromised: When IoT Devices Turn Into Threats](https://daily.dev/posts/connected-compromised-when-iot-devices-turn-into-threats-ubqear0qp) · Dark Reading · 0 upvotes · 0 comments --- Tags: [#tech-news](https://daily.dev/tags/tech-news), [#security](https://daily.dev/tags/security), [#aws](https://daily.dev/tags/aws), [#backend](https://daily.dev/tags/backend) [View this post on daily.dev](https://daily.dev/posts/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords-dw7t89t2b) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords","url":"https://daily.dev/posts/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords-dw7t89t2b","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords-dw7t89t2b"},"datePublished":"2026-07-17T13:30:36.900Z","dateModified":"2026-09-13T20:17:11.773Z","description":"A security researcher discovered an unpatched AWS IoT policy misconfiguration in Shark robot vacuums that allows a certificate stolen from one device to send...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8fe9eeb967de205fd6743e2535f16178?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8fe9eeb967de205fd6743e2535f16178?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords-dw7t89t2b","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"tech-news,security,aws,backend","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords-dw7t89t2b#faq","mainEntity":[{"@type":"Question","name":"What is the security vulnerability found in Shark robot vacuums' AWS IoT setup?","acceptedAnswer":{"@type":"Answer","text":"Shark's embedded AWS IoT certificates are overly permissive, allowing a certificate extracted from one vacuum to publish and subscribe to MQTT topics belonging to any other Shark device in the same AWS Region. This lets an attacker with one stolen certificate remotely access other vacuums' cameras, steal plaintext Wi-Fi passwords, and copy home floor maps, according to researcher tokay0's analysis of a Shark RV2320EDUS unit. Track how cloud IoT misconfigurations like this get disclosed and patched by following security coverage on daily.dev."}},{"@type":"Question","name":"How many Shark IoT devices are affected by the AWS IoT cross-device access flaw?","acceptedAnswer":{"@type":"Answer","text":"During a 24-hour observation window in a single AWS Region, researcher tokay0 recorded 1,517,605 unique Shark device serial numbers, of which about 673,816 (roughly 44%) responded in a way indicating support for remote command execution, suggesting a very large number of SharkNinja IoT devices are affected across just that one region. Developers weighing IoT cloud architecture risks can keep up with incidents like this on daily.dev."}},{"@type":"Question","name":"Has SharkNinja fixed the AWS IoT vulnerability affecting its robot vacuums?","acceptedAnswer":{"@type":"Answer","text":"No, according to the researcher who discovered it, SharkNinja had not fixed the vulnerability despite being notified more than six months earlier. Because the flaw lies in server-side AWS IoT policy configuration rather than device firmware, owners cannot patch it themselves and are advised to disable remote control features or disconnect affected vacuums from Wi-Fi until SharkNinja issues a fix. Anyone owning connected devices with unresolved vendor vulnerabilities can follow disclosure updates via daily.dev."}}]} ```