Meta's Ray-Ban smart glasses were made to run an unauthorised application after a security researcher bypassed checks designed to prevent unapproved software installations.
In findings published on 6 November 2026, researcher Paula Pamoutaf described modifying data delivered through a paired smartphone to disable signature verification and install a self-signed app on the glasses.
The demonstration revealed a weakness in the device's software protections. It did not establish that strangers could remotely take over someone else's glasses.
How the Researcher Gained Access
The researcher began examining a borrowed pair of Ray-Ban Meta glasses in July 2026. Rather than dismantling the hardware, they analysed the Meta AI companion app, which handles pairing, synchronisation and firmware updates.
They intercepted information used during an over-the-air update and modified a request to obtain a complete firmware package. Examining that package helped them investigate how applications were installed on the glasses.
Their attention turned to Meta's Device Access Toolkit (DAT), which connects mobile applications to compatible glasses.
According to the researcher's account, firmware version 126 and earlier did not verify that the toolkit's Android application package was signed by Meta.
Using modifications on the paired phone, the researcher substituted a self-signed application. They then launched Meta's Camera Access sample app to start a session and established an interactive command shell over Wi-Fi Direct.
The shell allowed commands to run within the installed application's security context. The demonstration did not establish root access or unrestricted control of the glasses.
How Firmware 127's Protection Was Bypassed
After about five days, the researcher lost shell access. They could not determine whether their own actions caused this or whether Meta had intervened.
They subsequently found that firmware version 127 enforced application signature verification, blocking the original installation method.
However, the protection depended on a setting in a configuration file. The glasses received that file through the paired phone, which fetched it from Meta's servers.
The researcher found that the glasses checked the file's structure but did not verify whether its contents had been altered. Changing a value disabled signature verification, allowing the self-signed application to be installed again.
What Does This Mean for Users?
Ray-Ban Meta glasses have cameras, microphones and wireless connectivity. Meta says its Device Access Toolkit supports camera, audio and motion features. Version 1.0 began rolling out on 30 September 2026. These capabilities make software protections important.
However, the published attack required deliberate manipulation of software on a paired smartphone. It did not demonstrate a method for remotely compromising another person's glasses without such access.
The researcher did not report stealing photographs, making covert recordings or exploiting devices belonging to unsuspecting owners.
Has Meta Fixed the Vulnerability?
The researcher said they reported the findings through Meta's bug bounty programme and received approval to publish their account. They took that approval as a possible indication of a fix, rather than confirmation.
The disclosure provided no verified patch date or final firmware version resolving the issue. Whether the method still works on updated glasses remains unconfirmed.
The findings show how a security check can be undermined when a device trusts configuration data that can be altered before it arrives.
