Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilitymedium

Researcher runs own code on Meta Ray-Ban glasses through version 127

2 sources · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

A researcher showed Meta Ray-Ban glasses can run her own software, including after version 127 if the paired phone is controlled.

Researcher Paula, known as pamoutaf, demonstrated installing and running her own software on Ray-Ban Meta smart glasses. Lobsters reports she extracted firmware, installed a self-signed app, and obtained a shell over a wireless link on firmware through version 126, and says verification was patched in version 127. Malwarebytes Labs reports that versions through 126 did not verify apps came from Meta, while version 127 added a signature check that a settings file from the paired phone can disable. According to Malwarebytes, the demo requires control of the paired phone, does not show camera or recording access, and she said a follow-up would examine other attack paths.

Key facts
  • Firmware through version 126 did not verify that apps came from Meta.
  • Lobsters says firmware verification was patched in version 127.
  • Malwarebytes says version 127’s check can be turned off via a phone settings file.
  • The Meta AI app on the paired phone installs developer apps on the glasses.
  • Malwarebytes says the demo does not show camera access or footage exfiltration.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 6, 2026Lobsters reports shell access on glasses through firmware 126 · Lobsters
  2. Nov 10, 2026Malwarebytes details version 127 check bypass via phone settings · Malwarebytes Labs

What each outlet adds

beyond the shared facts
  • LobstersReports shell access and says version 127 patched verification.
  • Malwarebytes LabsNames researcher and says version 127 check can still be disabled.
Vendors
Meta
Products
Ray-Ban Meta glassesMeta AIRay-Ban smart glasses

Coverage

oldest first · one row per article · UTC
  1. · 4d ago Lobsters · securityFirst report

    Researcher demonstrates arbitrary code execution on Meta Ray-Ban smart glasses

    The researcher achieved shell access on Meta Ray-Ban smart glasses using firmware extraction and self-signed APK installation, bypassing signature checks in versions up to 126.

  2. · 13h ago Malwarebytes Labs

    Researcher bypassed Ray-Ban Meta glasses checks to run her code

    Firmware through version 126 skipped signature checks; version 127’s check can be disabled by editing a phone settings file.