# LG fixes webOS flaws allowing root takeover from a local network

_Published Tuesday, October 13, 2026 at 8:59 AM EDT · Security · Latest · Tier 2 — Notable_

![LG fixes webOS flaws allowing root takeover from a local network — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgs2Z0M9u8vYqE8SBNBzfOGoc4Crog-_PBWeZNY8IprfYaa08ZyZ_PTfMhosBFrQNS_f1JecVbl_HEq7sutExV_92yaZWVIA51YD59JOFa_fKZQyEvpZNUxai8pgDrQX_Kp_wQqJoEFFQIFEwa2c3vhyphenhyphenQtU0U9w5XDwjSAij3BPz_qRs7-t0eu8ZssOZuE/s1700-nu-rw-lo-l85-e365/lg-tv.jpg)

LG has issued a fix for three webOS vulnerabilities that let an attacker on the same local network gain root access to certain smart TVs without a PIN or owner interaction, according to an SSD Secure Disclosure advisory published October 12.

The chain bypasses pairing authentication, loads an attacker-controlled page through a built-in app and injects commands into a logging service running with root privileges. It was tested on models 32LQ636BPSA and 27TQ600SW with webOS 7.5.7-25 and firmware 04.54.40. Other affected models or versions are unknown. No exploitation in the wild has been reported, and no workaround is available for owners unable to update.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/lg-smart-tvs-vulnerable-to-pre-auth.html)

---
Canonical: https://techandbusiness.org/newswire/YTuDD5ST84PZvygdDFuO6E
Published: 2026-10-13T12:59:38.030Z
Story chronology: 2026-10-12T00:00:00.000Z
Retrieved: 2026-10-13T15:44:19.158Z
Publisher: Tech & Business (techandbusiness.org)