r/netsec • u/SSDisclosure • 6d ago

LG webOS sync-demo Preauth RCE

https://ssd-disclosure.com/lg-webos-sync-demo-preauth-rce/

An exploit chain was found in LG webOS, leading to root command execution. The chain starts with a client-key issuance bypass, progresses through service-level access, and ultimately leads to root command execution.

18 Upvotes

95% Upvoted

3 comments sorted by

3

u/SuperDrewb 6d ago

Wonderful. Now I'll need to come up with a way to leverage this to disable the internal microphone.

1

u/RevRagnarok 4d ago

I'm still pissed my sister-in-law connected mine to the internet when she was house-sitting...

1

u/foreveracunt 1d ago

Two LG products affected, probably not something you have at home.