This topic is a vulnerability in Android that allows Gemini to send SMS messages without unlocking the phone, appeared on Tech Without Borders.

Reports revealed a security vulnerability in the Android system that allows the smart assistant Gemini to bypass the lock screen and send SMS messages or reactivate access to some applications without verifying the PIN code under certain conditions.

The method of exploiting the vulnerability is when trying to use Gemini from the lock screen to send a message, where the system requests entering the PIN code as expected. But by pressing simultaneously the attach button and the next button, the security verification is bypassed, allowing some commands to be executed without unlocking the phone.

The problem was not limited to the messaging app; experiments showed that it is possible to reactivate Gemini's access to WhatsApp even if the user had previously disabled this permission from settings.

According to the report, Google has been notified about this vulnerability since last May on Android 16, and confirmed that they are aware of it and working on releasing an update to fix it. It is also believed that the vulnerability is not limited to Pixel phones only, but all affected devices have not yet been identified.

Source

This topic is a vulnerability in Android that allows Gemini to send SMS messages without unlocking the phone, appeared on Tech Without Borders.