Now even a light bulb can steal your Wi-Fi password.

Recently, vulnerabilities were discovered in TP-Link Tapo L530E smart bulbs and the TP-Link Tapo application. These vulnerabilities can pave the way for any malicious actor to access Wi-Fi credentials.

The vulnerabilities are related to unreliable authentication and a lack of random elements in symmetric encryption.

With the help of these vulnerabilities, a malicious actor can obtain the Wi-Fi credentials of the victim's network and control all devices connected to that network.

Until the vulnerabilities are fixed, I recommend not using these light bulbs and their associated application. 

Source: AntiHaker Blog