Google and Xiaomi appear to have a pretty serious security issue on their hands.
Reddit user Dio-V recently discovered that when trying to access their Xiaomi security camera on their Google Nest Hub, they were being shown still images from other peoples' homes. Some of the images shown are a bit corrupted and hard to make out, but others offer a clear view of things like a porch and a child sleeping in a crib.
The camera being used by Dio-V is a Xiaomi Mijia 1080p Smart IP Camera. As noted by Android Police, you can link this camera to your Google account and then access the feed on your Google or Nest device using Xiaomi's Mi Home service.
In a statement, Google has confirmed that it's aware of the issue and working with Xiaomi on a fix. Until a solution is found, Google has disabled Xiaomi integrations on Google devices, meaning that Mi Home devices can no longer integrate with Google Home and Assistant. Dio-V has confirmed that their Xiaomi camera is now longer viewable on the Google Nest Hub.
This is major security issue. While it's not clear exactly where these still images are coming from, it's still unsettling that the Xiaomi camera and Nest Hub are feeding images from other peoples' security cameras to this user, especially since they're showing other people and children sleeping, unaware of what's happening. It's good that Google quickly killed Xiaomi's integrations with Google devices while the two companies work on a fix.
