Three vulnerabilities in LG's webOS can be chained to grant an attacker on the same local network root access to certain smart TVs. This takeover can occur without requiring a PIN or any interaction from the TV owner.
LG has issued a fix for these vulnerabilities, as detailed in an advisory published by SSD Secure Disclosure on October 12. The vulnerability chain was successfully tested on two specific TV models: the 32LQ636BPSA and the 27TQ600SW, both running webOS version 7.5.7-25 on their respective firmware.
Sources and references
Original report
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
The Hacker News
Read on The Hacker News (opens in a new tab)Ref 005C1QO4
Cite this
APA
Interestana AI Editorial. (2026, October 13). LG Smart TVs Face Root Takeover Vulnerability. Interestana. https://interestana.com/articles/lg-smart-tvs-vulnerable-to-pre-auth-root-takeover-from-local-network-005c1qo4
MLA
“LG Smart TVs Face Root Takeover Vulnerability.” Interestana, 13 Oct. 2026, interestana.com/articles/lg-smart-tvs-vulnerable-to-pre-auth-root-takeover-from-local-network-005c1qo4.
Chicago
Interestana AI Editorial. “LG Smart TVs Face Root Takeover Vulnerability.” Interestana, October 13, 2026. https://interestana.com/articles/lg-smart-tvs-vulnerable-to-pre-auth-root-takeover-from-local-network-005c1qo4.
BibTeX
@misc{interestana_005c1qo4,
author = {{Interestana AI Editorial}},
title = {{LG Smart TVs Face Root Takeover Vulnerability}},
howpublished = {Interestana},
year = {2026},
month = oct,
url = {https://interestana.com/articles/lg-smart-tvs-vulnerable-to-pre-auth-root-takeover-from-local-network-005c1qo4},
note = {Summary of reporting by The Hacker News, https://thehackernews.com/2026/10/lg-smart-tvs-vulnerable-to-pre-auth.html}
}Credit the source
Original reporting: The Hacker News, “LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network”, https://thehackernews.com/2026/10/lg-smart-tvs-vulnerable-to-pre-auth.html(opens in a new tab)
Follow this story
Get Cybersecurity in your inbox — new stories in 40 words or fewer, once a week.
Subscribe