
Security Flaw Leaves 11,000 Yarbo Robots Open to Remote Takeover
A researcher found that all Yarbo robotic lawn mowers use the same hardcoded password for administrative access, allowing unauthorized remote control of roughly 11,000 deployed units globally. The flaw also exposes users' Wi-Fi credentials, risking wider network compromise. Yarbo markets these 200-pound machines—which handle mowing, snow blowing, and leaf clearing—as premium products, making the authentication failure a serious liability.
Published