A security concern was identified where a significant portion of apps available on LG smart TVs include residential proxy SDKs that turn the TVs into proxy nodes, allowing third parties to route internet traffic through them. This practice is unintended by LG and raises privacy and security concerns since users may not be fully aware or able to audit this behavior. LG Electronics USA is actively working with app developers to remove these proxy capabilities from their webOS apps and will suspend apps that fail to comply. The residential proxy SDKs are often bundled in various app types, including games and utilities, and are used by proxy providers to monetize user devices. LG is strengthening its app evaluation process to prevent future inclusion of such SDKs.

The presence of residential proxy SDKs in smart TV apps allows third parties to route internet traffic through users' televisions without clear ongoing user control or transparency. This could lead to privacy concerns and potential misuse of user devices as proxy nodes. However, there is no indication of direct exploitation or remote code execution from this behavior. The impact is primarily related to unauthorized use of device resources and potential privacy risks.

LG Electronics is working with developers to remove residential proxy SDKs from smart TV apps on the webOS platform. Apps that do not comply will be suspended from the LG app store. Users should ensure their smart TV apps are updated and obtained from official sources. LG is enhancing its app review process to prevent future inclusion of such proxy SDKs. No additional user action is currently required beyond applying app updates and monitoring app permissions.