These vulnerabilities could allow the robots to be turned into surveillance devices, surreptitiously spying on their owners.