What the Gamers Nexus Investigation Found About LG webOS TVs

The central finding of the Gamers Nexus investigation is not that every LG television is continuously recording everyone nearby. Rather, controlled tests on selected LG webOS OLED models reportedly showed capabilities that create significant privacy and security concerns: microphone capture while the display appeared off in standby, local retention of audio while disconnected, later transmission after reconnection, and broad network discovery. 257

What researchers said they demonstrated

Audio capture while the TV appeared off

In bench testing, researchers reported recovering clear microphone audio from an LG OLED TV while its screen was dark and the set appeared to be in standby. Reports on the tests say the television could save that material locally and transmit it once internet access returned. 5715

That distinction matters: standby is not the same as removing power. A TV with a dark screen may still have power for background functions. Unplugging it or switching off power at the outlet is materially different. 27

Disconnecting the internet did not stop local storage in the test

The reporting says that, after Ethernet was disconnected, audio and text files continued to accumulate on the tested TV. Once connectivity returned, the stored material was reportedly uploaded. 5713

This means a temporary loss of internet access should not be treated as proof that a device has stopped collecting data; in the reported test, it changed the timing of transmission rather than preventing local retention. 57

On-device text logs and network discovery

Researchers and subsequent reporting described plain-text, on-device logs associated with voice input, alongside discovery of devices on the local network. The reported inventory included devices such as phones, PCs, printers, network equipment and smart-home hardware, as well as nearby Wi‑Fi network names and signal strengths. 467

The investigation linked this telemetry to LG’s advertising operations, raising the possibility that data about a household’s devices and network environment could be useful for audience profiling and targeted advertising. 13

ACR was reported to extend beyond built-in apps

Automatic Content Recognition (ACR) is technology used to identify media being displayed or played. The investigation reported that LG’s first-party ACR functionality could recognize content across inputs, including external HDMI sources—not solely apps running on the TV itself. 810

For viewers, that means privacy considerations may extend to a game console, cable box, Blu-ray player, or computer connected to the television, depending on the model, settings and software configuration.

Why the webOS vulnerabilities change the risk

The researchers also reported webOS security weaknesses, including remote-code-execution paths. The important implication is conditional: if an attacker can compromise a television, microphones and other already-present inputs could be abused as surveillance tools. 415

This should not be conflated with a finding that LG universally and secretly records all ambient household conversations. One report on the research notes that the recording demonstration involving a compromised TV required researchers to control the test device; it did not establish universal covert recording by default. 37

What the investigation does—and does not—establish

The evidence described in available reporting is substantial enough to warrant caution, but its limits are important:

• The demonstrations involved selected retail OLED/webOS units in controlled conditions. They do not establish identical behavior across every model, region, firmware version, account state or settings combination. 57
• The reported tests show that audio capture, storage and later upload were possible under the tested conditions. They do not alone prove constant recording of every owner’s room. 2537
• A security flaw increases the potential impact of compromise; it is not evidence that every TV has already been compromised. 437
• LG had previously stated that its TVs do not collect, record or store ambient conversations, a position that reporting says is in tension with the test results. The provided reporting does not include a detailed current, model-by-model LG remediation statement. 17

How to reduce smart-TV privacy risk

No single menu setting can independently verify a TV’s network behavior. A layered approach is more meaningful.

1. Disconnect the TV from Wi‑Fi and Ethernet if smart functions are unnecessary. This is the clearest way to prevent the TV itself from sending data over the network. A separate streaming device has its own privacy trade-offs, so it should be evaluated separately. 5
2. Use a guest network or VLAN if the TV must be online. Isolating the TV from computers, phones, storage devices and smart-home gear reduces what it can discover on the primary home network. Restricting outbound traffic with router, firewall or DNS controls can further reduce exposure. 4
3. Turn off optional data features. Disable ACR, advertising personalization, voice features, microphone permissions and other data-sharing controls where available. These settings can reduce exposure, but should be treated as risk reduction rather than a complete assurance. 10
4. Keep webOS updated and reduce unnecessary network services. Prompt firmware updates, avoiding untrusted networks and disabling UPnP where practical are sensible precautions when security weaknesses have been reported. 48
5. Remove power when strong assurance is needed. For a TV in a sensitive space, unplugging it or using a switched outlet avoids the ambiguity of standby mode. 27

Bottom line

The investigation’s most consequential claim is that a tested LG webOS TV could capture and store audio in standby, retain it after an internet disconnect, and later upload it—while also mapping parts of the household network. 57 The findings are serious, but they should be read as tested capabilities on particular devices and configurations, not a blanket conclusion about all LG televisions. For owners who want the lowest practical risk, network isolation or complete disconnection is more dependable than relying solely on privacy toggles. 45