<![CDATA[LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network]]>

<![CDATA[LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network]]>Three vulnerabilities in LG's webOS can be chained together to give an attacker on the same local network root access to certain smart TVs, without a PIN or any interaction from the device owner.

The vulnerable platform is webOS, and the chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmware.

LG has since issued a fix, according to an advisory published by SSD Secure Disclosure on October 12.

Key points:

Attackers must already be on the same local network as the target TV
No PIN is required
No user interaction is required
Successful exploitation results in root access

There is no indication in the source that a CVE identifier has been assigned, so none is referenced here. Owners of the affected models should check for and apply LG's firmware update as soon as it is available.

Source: The Hacker News
Do you have any of these LG models on your network, and have you already applied the firmware fix?

]]>https://xploitlk.com/topic/672/lg-smart-tvs-vulnerable-to-pre-auth-root-takeover-from-local-networkRSS for NodeTue, 27 Oct 2026 07:51:11 GMTTue, 13 Oct 2026 12:30:23 GMT60