// GeminiMEDIUM
Android 16 lock screen bypass vulnerability allows Gemini to send SMS messages and reconnect revoked apps without PIN authentication. The bug, reported to Google in May, exploits a race condition between pressing 'Continue' and Gemini's 'Add attachment' button simultaneously, bypassing required authentication checks. Requires physical access to an unlocked device. Google confirmed the issue and indicated a fix was rolling out in mid-July.
- Android Lock Screen Bug: Gemini Can Bypass Security to Access Me(opens in a new tab)
- Lockscreen bug can let hackers bypass security via Gemini AI on (opens in a new tab)
- Android lock screen vulnerability allows Gemini to send messages(opens in a new tab)
// Get alerts for Gemini