In a nutshell: A targeted gesture combination on the lock screen bypasses authentication and access restrictions of Google Gemini, enabling message sending and data access without device unlock.
A bug in Android 16 allows attackers with physical access to a device to send SMS and WhatsApp messages via the lock screen without entering a PIN. Google is distributing a security update this week.
The vulnerability affects the integration of the AI assistant Gemini on the lock screen and has been reproduced on a Google Pixel 6a with current software updates. The system normally requires PIN entry when sensitive functions or external apps are initiated. However, through faulty processing, this barrier can be circumvented: if the continue button and the function to add a file attachment are touched simultaneously, the authentication check is skipped and access to the messaging service is granted — even if this access was previously explicitly blocked in Gemini settings.
The problem is not limited to message sending alone. Through the faulty handover of processes between lock screen interface and regular applications, attackers can also independently reactivate previously revoked app permissions for Gemini, view or delete the AI assistant’s chat history, modify device security settings, and extract local data.
For CISOs, this risk scenario is relevant: an attacker with physical access can send fraudulent messages or extortion letters to contacts in the device owner’s name without authentication — particularly critical if such messages are exploited for social engineering or fraud scenarios. While the flaw requires device theft, it becomes relevant as an immediate consequence of such incidents.
Google has already confirmed a fix and plans to distribute the security update for the current week. Until the patch is released, users should disable Gemini usage on the lock screen and permissions for calls and messages in the locked state in their device settings.
Source: www.it-daily.net · Published 21 July 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.