Roborock
Roborock (Stone Technology) is a technology company specializing in intelligent cleaning robots. Its robotic vacuum products integrate cameras, microphones, and mapping capabilities, providing remote control and data synchronization through cloud services.
Timeline (last 90 days)
Some Roborock models have introduced a Secure Boot mechanism that verifies firmware signatures, raising the barrier to flashing.
A co-maintainer of the python-roborock project built a complete Roborock private cloud from scratch—without flashing firmware or modifying hardware—allowing the robotic vacuum cleaner to operate independently of the manufacturer's cloud.
The core highlight of this solution is zero hardware modification and no need for root access, minimizing destructiveness.
This solution completely bypasses the firmware layer and redirects traffic during the device's initial network configuration and onboarding phase.
The first step of the solution is to exploit certain vulnerabilities during the device onboarding phase to redirect the vacuum cleaner's communication traffic to a custom URL instead of Roborock's official servers.
The second step of the solution is to fully replicate Roborock's backend technology stack, including the MQTT messaging channel and REST interface.
After completely cutting off public internet access, developers have reported that the vacuum cleaner operates normally in an offline state with all functions working as expected.
Roborock vacuum cleaners report cleaning status in real time, receive commands, and synchronize sensor data via the MQTT channel, while obtaining map data and updating device configuration via the REST interface.
This solution is better suited to technically inclined users who have a demand for local control and are willing to get hands-on, rather than ordinary consumers.
Valetudo primarily supports devices equipped with Allwinner or Rockchip chips, covering select models from brands including Roborock, Dreame, and Viomi.
All Facts (10)
Some Roborock models have introduced a Secure Boot mechanism that verifies firmware signatures, raising the barrier to flashing.
50%UnverifiedA co-maintainer of the python-roborock project built a complete Roborock private cloud from scratch—without flashing firmware or modifying hardware—allowing the robotic vacuum cleaner to operate independently of the manufacturer's cloud.
50%UnverifiedThe core highlight of this solution is zero hardware modification and no need for root access, minimizing destructiveness.
50%UnverifiedThis solution completely bypasses the firmware layer and redirects traffic during the device's initial network configuration and onboarding phase.
50%UnverifiedThe first step of the solution is to exploit certain vulnerabilities during the device onboarding phase to redirect the vacuum cleaner's communication traffic to a custom URL instead of Roborock's official servers.
50%UnverifiedThe second step of the solution is to fully replicate Roborock's backend technology stack, including the MQTT messaging channel and REST interface.
50%UnverifiedAfter completely cutting off public internet access, developers have reported that the vacuum cleaner operates normally in an offline state with all functions working as expected.
50%UnverifiedRoborock vacuum cleaners report cleaning status in real time, receive commands, and synchronize sensor data via the MQTT channel, while obtaining map data and updating device configuration via the REST interface.
50%UnverifiedThis solution is better suited to technically inclined users who have a demand for local control and are willing to get hands-on, rather than ordinary consumers.
50%UnverifiedValetudo primarily supports devices equipped with Allwinner or Rockchip chips, covering select models from brands including Roborock, Dreame, and Viomi.
50%