A hidden, persistent backdoor exists in Yarbo firmware version 2.3.9 that allows remote, unauthenticated or weakly authenticated access to privileged functions. This backdoor is undocumented, cannot be disabled through user settings, and remains active even after factory resets and normal firmware updates.