r/netsec • u/SSDisclosure • 3d ago

LG webOS sync-demo Preauth RCE

https://ssd-disclosure.com/lg-webos-sync-demo-preauth-rce/

An exploit chain was found in LG webOS, leading to root command execution. The chain starts with a client-key issuance bypass, progresses through service-level access, and ultimately leads to root command execution.

13 Upvotes

89% Upvoted

2 comments sorted by

3

u/SuperDrewb 2d ago

Wonderful. Now I'll need to come up with a way to leverage this to disable the internal microphone.

1

u/RevRagnarok 8h ago

I'm still pissed my sister-in-law connected mine to the internet when she was house-sitting...