Security researcher says he gained root access to a 2025 Samsung TV via a zero-day vulnerability and found multiple telemetry features
Security researcher log4j posted on X starting on October 21 that, after a 2025 Samsung TV displayed highly targeted ads, he used a zero-day vulnerability to obtain a root shell even though the firmware was AES-encrypted and there was no key, and said he found multiple data-collection features in the system.
In later posts, the researcher listed what he found, including a service called csapi-tv-service-alwaysonvoice, automatic content recognition (ACR), geolocation, network mapping, targeted advertising services, four separate DRM services, and user profiling, among other telemetry items. He also shared a screenshot of the security-policy.xml file and said that models without a built-in microphone would try to use a connected soundbar or Bluetooth device.
At present, these findings come from the researcher’s own posts and screenshots, and there has been no public response from Samsung or an independently reproduced full report from a third party. The researcher said he is writing technical documentation and plans to release an open-source tool to reduce telemetry.
Original sources:
Title: i own a relatively new (2025) samsung tv... Publisher: log4j (@log4j) Date: 2026-10-21 URL: https://x.com/log4j/status/2113014142600953868 Source type: personal social media post Verification: actually read in this report, verification date 2026-10-26 Supporting content: supports the researcher’s claim of obtaining a root shell and saying he found privacy-related features
Title: always on hot mic functionality btw. PLUS: automatic content recognition... Publisher: log4j (@log4j) Date: 2026-10-21 URL: https://x.com/log4j/status/2113028209612644795 Source type: personal social media post Verification: actually read in this report, verification date 2026-10-26 Supporting content: supports the telemetry items he listed and the mention of the security-policy.xml screenshot
Title: Researcher claims Samsung TV microphone is always on Publisher: pasqualepillitteri.it Date: 2026-10-24 URL: https://pasqualepillitteri.it/en/news/26796/samsung-tvs-researcher-claims-microphone-always-on Source type: technology media retelling Verification: actually read in this report, verification date 2026-10-26 Supporting content: supports the summary description of the researcher’s posts and notes that they have not been independently verified
ABAB AI Insight
Security researcher log4j began posting on X on October 21 about his analysis process on his own 2025 Samsung TV. He said that after obtaining root privileges through a zero-day vulnerability, he observed multiple data-collection-related components in the Tizen system, including an always-on voice service.
The functions mentioned in the posts include automatic content recognition, geolocation, network device mapping, targeted advertising, user profiling, and configuration entries related to about 400 partners. Some later posts also referred to audio event classification, such as counting dog barks and baby cries, as well as attempts to invoke connected devices when there is no built-in microphone.
The publicly available material currently comes mainly from the researcher’s unilateral statements and screenshots, and there is still no official Samsung confirmation or a published full independent technical reproduction report. Future developments to watch include the technical documentation and open-source tool he promised to release, as well as whether other researchers produce independent verification.
ABAB News · Cognitive Law
Security researcher log4j said he gained root access to a 2025 Samsung TV via a zero-day vulnerability.
In his posts, he listed multiple telemetry-related findings including always-on voice, ACR, geolocation, and user profiling.
The related claims currently come from the researcher’s own posts, and there has been no independently verified full reproduction or official Samsung response.