DJI Drones Operate Over U.S. Military Bases as Geofencing Removal Creates National Security Gap

Fort Bliss officials are conducting security risk assessments after discovering El Paso's citywide DJI drone program operates adjacent to the base without prior notification, while reports indicate DJI removed geofencing restrictions that previously prevented drone operations over sensitive U.S. sites including the White House and military installations. The changes create a national security gap as commercial drones gain unrestricted access to protected airspace.

HIGH CONFIDENCE: Multiple incidents confirm DJI drones operating over or near U.S. military installations. Federal agents arrested a Chinese national for operating a DJI drone over a U.S. military base for approximately one hour. Fort Bliss discovered El Paso's municipal drone program using DJI platforms operates adjacent to the installation.

The security concern isn't necessarily malicious intent—it's the intelligence collection opportunity. DJI drones transmit flight data, imagery, and telemetry to company servers.

Retired U.S. Army Colonel John Mills reported that DJI removed geofencing restrictions, enabling drone operations over sensitive U.S. sites. Geofencing uses GPS coordinates to create virtual boundaries that prevent drones from entering restricted airspace. Its removal eliminates a key technical control that supplemented physical security measures.

Municipal Program Exposure

Fort Bliss officials learned of El Paso's citywide DJI drone program only after it was operational, indicating coordination gaps between civilian authorities and military installations. The program operates adjacent to one of the U.S. Army's largest training installations, which hosts active-duty units and conducts classified operations.

MODERATE CONFIDENCE: The Fort Bliss situation likely represents a broader pattern. Hundreds of U.S. municipalities have adopted drone programs for public safety, infrastructure inspection, and emergency response. Most use DJI platforms due to their cost-effectiveness and capabilities. Few coordinate with nearby military installations.

The security concern isn't necessarily malicious intent—it's the intelligence collection opportunity. DJI drones transmit flight data, imagery, and telemetry to company servers. Even unintentional overflights of military facilities create exploitable intelligence on base layouts, security measures, and operational patterns.

Geofencing Removal

DJI's geofencing system previously prevented drones from taking off or flying into restricted zones including military bases, airports, and government facilities. The system used GPS coordinates and firmware restrictions to enforce no-fly zones. Reports indicate these restrictions have been removed or significantly weakened.

MODERATE CONFIDENCE: The geofencing removal may be related to regulatory changes or legal challenges rather than a deliberate security decision. However, the effect is the same—technical controls that prevented unauthorized flights over sensitive sites no longer function.

The one-hour overflight that led to the Chinese national's arrest demonstrates the operational window created by geofencing removal. Previous systems would have prevented takeoff near military installations or forced automatic landing if the drone entered restricted airspace. Without these controls, operators can conduct extended surveillance missions.

Conflict Use Patterns

DJI drones are being used in active combat operations globally. Sudanese RSF conducted drone strikes using DJI platforms armed with 82mm mortar bombs. Sudanese Armed Forces used DJI drones armed with 120mm Iranian-made mortar bombs. These aren't modified military systems—they're commercial platforms adapted for combat.

The adaptation is straightforward: attach a release mechanism for munitions, add basic targeting capability, and operate the drone normally. The same platforms flying over U.S. military bases could be weaponized with minimal modification.

Incident	Location	Duration	Outcome
Chinese national arrest	U.S. military base	~1 hour	Federal arrest
Fort Bliss discovery	El Paso, TX	Ongoing program	Security review
Geofencing removal	Nationwide	Unknown timeline	Unrestricted access
Sudan combat use	Multiple sites	Ongoing conflict	Operational weapons

Intelligence Collection Risk

DJI drones collect extensive data during operations:

• High-resolution imagery and video
• GPS coordinates and flight paths
• Telemetry including altitude, speed, and heading
• Operator location and device information

This data is transmitted to DJI servers, which are subject to Chinese government data access laws. Even if DJI doesn't intentionally share military base imagery, Chinese intelligence services can compel access to company databases.

HIGH CONFIDENCE: The intelligence value of systematic drone overflights is significant. Repeated flights over the same installation reveal security patterns, identify vulnerable entry points, map facility layouts, and document equipment and personnel movements.

Procurement Implications

The security concerns have already affected U.S. military procurement. The Department of Defense banned DJI drones from military use in 2017. However, the ban doesn't extend to civilian agencies, municipal governments, or private operators near military installations.

Skydio has deployed 60,000 drones across 1,200+ U.S. public safety agencies and all military branches as a domestic alternative to DJI. However, Skydio platforms cost 2-3x more than equivalent DJI systems, creating budget barriers for municipal adoption.

Regulatory Gap

The Fort Bliss situation exposes a regulatory gap. The FAA regulates civilian drone operations but doesn't coordinate with military installations on security implications. Military bases can't unilaterally restrict civilian airspace without FAA authorization. Municipal governments aren't required to notify nearby installations about drone programs.

U.S. Southern Command is establishing an autonomous warfare element integrating drones and AI as core operational tools, moving beyond ISR support to persistent coverage and faster targeting. This suggests the military is adapting to an environment where drones are ubiquitous rather than trying to restrict their proliferation.

Counter-UAS Limitations

Military installations have counter-UAS systems, but these are optimized for hostile threats, not civilian drones operating legally in adjacent airspace. Engaging a municipal public safety drone creates legal and political complications even if it poses a security risk.

MODERATE CONFIDENCE: The counter-UAS systems deployed at most U.S. installations can detect and track DJI drones but lack clear rules of engagement for civilian platforms operating near but not over military property.

International Precedent

The DJI security concerns mirror broader patterns in critical infrastructure protection. Iranian Shahed drones struck AWS data centers in UAE and Bahrain, causing $150 million in uninsured damage. The attacks demonstrated that commercial infrastructure faces the same drone threats as military installations.

Blitz Technology's SPECTRUM 1650 MS gimbal payload is operationally fielded on ROKETSAN's KOZ armed quadrupedal UGV, demonstrating that surveillance payloads originally designed for drones are being integrated into ground robots. The technology proliferation extends beyond aerial platforms.

Mitigation Options

Potential responses to the DJI security gap include:

1. Mandatory geofencing restoration: Require DJI to reinstate no-fly zones around military installations
2. Coordination requirements: Mandate that municipal drone programs notify nearby military bases
3. Domestic alternatives: Subsidize Skydio or other U.S. manufacturers to make domestic platforms cost-competitive
4. Enhanced counter-UAS: Deploy systems capable of safely disabling civilian drones without kinetic engagement
5. Data sovereignty: Require that drone telemetry from operations near sensitive sites remain on domestic servers

BOTTOM LINE: DJI's geofencing removal and uncoordinated municipal drone programs create a national security gap where commercial platforms can conduct extended surveillance of military installations without technical or regulatory barriers preventing access.