High · published December 11, 2025
⚡ Aqara Hub devices are secretly gathering and transmitting unencrypted sensitive data — that's like a nosy neighbor peeking in your window without asking! 🔥 Imagine you order a pizza, and instead of just delivering it, the delivery person opens your front door and starts taking notes on everything inside. That's what these devices are doing with your private information! An attacker could potentially intercept this unencrypted data, exposing your personal information and putting your privacy at risk. This could lead to unauthorized access to your accounts or even identity theft, making the lack of consent absolutely devastating.
Imagine you order a pizza, and instead of just delivering it, the delivery person opens your front door and starts taking notes on everything inside. That's what these devices are doing with your private information! The vulnerability allows Aqara Hub devices, like Camera Hub G3 and Hub M2, to collect and upload sensitive information without user consent, transmitting it in an unencrypted form.
An attacker could potentially intercept this unencrypted data, exposing your personal information and putting your privacy at risk. This could lead to unauthorized access to your accounts or even identity theft, making the lack of consent absolutely devastating. To protect yourself, update your Aqara Hub devices to the latest firmware versions: Camera Hub G3 (4.1.9_0028), Hub M2 (4.3.7_0028), and Hub M3 (4.3.6_0026) as soon as possible. Additionally, review your settings to limit the amount of data shared and consult the manufacturer for further security guidance. You've got this! With these updates, you'll regain control over your privacy and keep those nosy neighbors at bay! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| aqara/hub_m2_firmware | all versions | — |
| aqara/hub_m3_firmware | all versions | — |
| aqara/camera_hub_g3_firmware | all versions | — |