{"schema_version":"0.10.0","id":"LR-2026-0653","record_version":1,"title":"Gemini lock-screen flaw lets strangers send messages from locked Android phones","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":50.5,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":6.0,"completeness":3.84,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"349fb9f393cbd2ae11dc30b71d9670eda9d0706ee94baa066c1c5f7205487f44"},"system":{"model_name":"Gemini","model_version":null,"developer":"Google","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-07-17","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"Google's Gemini assistant on Android 16 phones could be used from the lock screen to send SMS and WhatsApp messages without the device PIN. Per press reporting, an attacker with physical access could send texts pretending to come from the owner. The flaw involved a specific multi-touch gesture: pressing Continue together with the Add attachment button let an SMS go out without authentication, and app connections could then be enabled the same way. Google said the bug is known and a fix was scheduled for rollout this week. The report came from Bitdefender, citing The Register, and noted that the settings changes persist after the owner unlocks the phone.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":"Lock-screen authentication prompt skipped when Continue is pressed together with the Add attachment button","failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"Fix in progress; rollout said to be scheduled this week","precursor_events":"Earlier similar Gemini lock-screen bypass bugs affecting Android since September 2025","control_chain":[{"layer":"L2","party":"harness_vendor","party_name":null,"control_id":"E3","outcome":"failed","reason":null,"quote":"However, when \"Continue\" is pressed simultaneously with Gemini's \"Add attachment\" button, the device allows the SMS to be sent without any authentication.","source_index":0,"reviewed":false}]},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Moderate test: scope bounded by the stated physical-access requirement; the sources state no count of affected parties","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.bitdefender.com/en-au/blog/hotforsecurity/googles-gemini-strangers-messages-locked-android-phone","publisher":"Bitdefender","date":"2026-07-17","type":"press","title":"Google's Gemini lets strangers send messages from your locked Android phone - Bitdefender","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.model_name":"C","system.developer":"C","event.incident_class":"C","event.root_cause_detail":"C","event.remediation":"C","event.precursor_events":"C","impact.severity":"D","impact.severity_because":"D","event.control_chain":"C","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.model_name":[{"source_index":0,"quote":"Gemini, Google's AI assistant, is supposed to make life easier for Android smartphone owners."}],"system.developer":[{"source_index":0,"quote":"Gemini, Google's AI assistant, is supposed to make life easier for Android smartphone owners."}],"event.incident_class":[{"source_index":0,"quote":"The Register says that it has received multiple reports since May of how it is possible to bypass authentication on Android 16 devices that have enabled Gemini access from the lock screen."}],"event.root_cause_detail":[{"source_index":0,"quote":"However, when \"Continue\" is pressed simultaneously with Gemini's \"Add attachment\" button, the device allows the SMS to be sent without any authentication."}],"event.remediation":[{"source_index":0,"quote":"As The Register reports, Google is working on a fix for a vulnerability that allows an attacker with physical access to a locked Android 16 device to use Gemini to send SMS messages and WhatsApp texts, without ever needing to enter a PIN."}],"event.precursor_events":[{"source_index":0,"quote":"The latest vulnerability is different from the previous similar Gemini-based Android lock screen bypass bugs that have been plaguing the operating system since September 2025."}],"impact.severity":[{"source_index":0,"quote":"Of course, exploiting a vulnerability like this does require physical access to a vulnerable Android device."}],"impact.severity_because":[{"source_index":0,"quote":"Of course, exploiting a vulnerability like this does require physical access to a vulnerable Android device."}],"event.control_chain":[{"source_index":0,"quote":"However, when \"Continue\" is pressed simultaneously with Gemini's \"Add attachment\" button, the device allows the SMS to be sent without any authentication."}],"event.summary":[{"source_index":0,"quote":"As The Register reports, Google is working on a fix for a vulnerability that allows an attacker with physical access to a locked Android 16 device to use Gemini to send SMS messages and WhatsApp texts, without ever needing to enter a PIN."},{"source_index":0,"quote":"However, when \"Continue\" is pressed simultaneously with Gemini's \"Add attachment\" button, the device allows the SMS to be sent without any authentication."},{"source_index":0,"quote":"A spokesperson at Google told The Register that this new bug is known about, and that a fix is scheduled to be rolled-out this week."}]},"notes_on_gaps":"Only one source, a press article by Bitdefender citing The Register; no primary report from Google or the researchers is provided. No count of affected users or devices is stated, so severity was set to moderate on the bounded physical-access requirement, which is my judgement. The disclosure date, detection date and occurrence date are not stated and were left out. Whether Gemini acted autonomously is not stated, so agent_involved, autonomy level and failure class were left out. The trigger and responsible party are not stated by the sources and were left out. The fix was only scheduled, not reported as made, so no fix remediation is recorded. The lock-screen PIN prompt is treated as the human-approval control (B1) and the device PIN check as failed (E3); both mappings are my judgement. Country and deployment context are not stated. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Publisher not yet named · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"Pressing Continue together with the Add attachment button let an SMS be sent from the lock screen without the PIN prompt.","quote":"However, when \"Continue\" is pressed simultaneously with Gemini's \"Add attachment\" button, the device allows the SMS to be sent without any authentication.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.bitdefender.com/en-au/blog/hotforsecurity/googles-gemini-strangers-messages-locked-android-phone"]},"analysis":{"sections":{"timeline":[{"text":"Earlier similar Gemini lock-screen bypass bugs have affected Android since this date.","quote":"The latest vulnerability is different from the previous similar Gemini-based Android lock screen bypass bugs that have been plaguing the operating system since September 2025.","source_index":0,"when":"September 2025"},{"text":"A security researcher published a write-up reproducing the lock-screen problem on a fully patched Pixel 6a.","quote":"In May 2026, a security researcher published a write-up describing how they had reproduced the problem on a fully patched Pixel 6a, using Gemini's Deep Research feature as the entry point.","source_index":0,"when":"May 2026"},{"text":"The Register received multiple reports of the authentication bypass on Android 16 devices.","quote":"The Register says that it has received multiple reports since May of how it is possible to bypass authentication on Android 16 devices that have enabled Gemini access from the lock screen.","source_index":0,"when":"since May"},{"text":"Google said the bug is known and a fix is scheduled to be rolled out this week.","quote":"A spokesperson at Google told The Register that this new bug is known about, and that a fix is scheduled to be rolled-out this week.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.bitdefender.com/en-au/blog/hotforsecurity/googles-gemini-strangers-messages-locked-android-phone"]}}