Researcher claims root on 2025 Samsung Smart TV, details tracking
Original title: Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking
The claims, including always-on voice telemetry, have not been reproduced on an unmodified set, and Samsung has not responded.
A researcher known as log4j says he used zero-day flaws to open a root shell on a 2025 Samsung Smart TV after AES-encrypted Tizen firmware blocked key recovery without hardware access. Starting October 21, 2026, he described automatic content recognition, screenshots, geolocation, network mapping, an advertising identifier, profile building, and a package he calls always-on voice. Samsung has not publicly answered, and the findings have not been reproduced on an unmodified television. A February 26, 2026 Texas agreement limits Samsung ACR collection there but does not confirm these claims.
Unconfirmed: The root access, zero-days, and tracking behavior are one researcher’s claims and have not been reproduced on an unmodified television.
- He named the voice package csapi-tv-service-alwaysonvoice and a support component rmdemon.
- He claims sets without a microphone can use a soundbar or Bluetooth microphone.
- ngxson’s test of a rooted Tizen set saw the microphone open for five seconds.
- Texas’s February 26, 2026 deal requires express consent before Samsung collects ACR data from Texas consumers.
- Log4j says OpenAI deactivated his account for “Cyber Abuse”; OpenAI has not explained.
Impact: Root shell and detailed viewing and audio tracking
| Product | Affected |
|---|---|
| Samsung Smart TV | 2025 |
| Samsung Tizen | — |
- 1.Turn off Viewing Information Services under Settings, All Settings, General and Privacy, Terms and Privacy to stop ACR.
- Vendors
- Samsung
- Products
- Samsung Smart TVTizen
- Organizations
- OpenAITexas Attorney General's Office
- Countries
- United States
From the original article
3 min read at cybersecuritynews.com
A cybersecurity researcher says he gained root access to a 2025 Samsung Smart TV and found software built to track far more than the picture on the screen. Known online as log4j, he started after the set kept showing ads that seemed oddly specific to his household. He says the Tizen firmware was AES-encrypted, so […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.