Skip to content
LG Smart TVs Exposed to Root Access Vulnerabilities

LG Smart TVs Exposed to Root Access Vulnerabilities

First seen 13 Oct 2026, 17:32 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 13, 2026 at 17:33 UTC
  • •LG's webOS has critical vulnerabilities allowing root access via local network attacks.
  • •Attackers can exploit hardcoded credentials to bypass authentication without user interaction.
  • •Firmware updates are available, but the extent of affected models is still unknown.

LG's webOS platform has been found to have multiple high-severity vulnerabilities that allow attackers on the same local network to gain root access to certain smart TVs without user interaction. The vulnerabilities were disclosed by SSD Secure Disclosure on October 12, 2026, and affect LG models 32LQ636BPSA and 27TQ600SW running webOS version 7.5.7-25. The attack exploits hardcoded credentials in a built-in app, bypassing authentication and allowing the execution of arbitrary commands with root privileges. LG has released a fix, but it remains unclear how many models are impacted. Users are advised to update their firmware or disconnect vulnerable devices from the network to mitigate risks. No known exploitation in the wild has been reported yet.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-12
Vulnerabilities disclosed
SSD Secure Disclosure published an advisory detailing multiple vulnerabilities in LG's webOS allowing root access.
The Hacker News
2026-10-12
Patch released
LG issued a fix for the identified vulnerabilities, urging users to update their firmware.
Cybernews

More articles in this cluster (4)

Following this threat?

Track LG in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 4

Common questions

Which LG TV models are affected?
The vulnerabilities have been confirmed on LG models 32LQ636BPSA and 27TQ600SW, but the full extent of affected models is unclear.
What should users do to protect their TVs?
Users should update their TV firmware immediately or disconnect the devices from the network until the update is applied.
Is there any evidence of exploitation in the wild?
No confirmed exploitation in the wild has been reported as of now.