A newly identified vulnerability in Google's Gemini AI assistant allows unauthorized individuals with physical access to a locked Android 16 smartphone to send messages via SMS and WhatsApp without needing to enter the device's security PIN. Google has confirmed awareness of the issue and stated that a fix is scheduled for release this week.
The exploit specifically affects Android 16 devices where Gemini access from the lock screen is enabled. Reports of this bypass method have been circulating since May 2026. A security researcher detailed in May 2026 how they successfully reproduced the problem on a fully patched Pixel 6a, utilizing Gemini's "Deep Research" feature as an initial entry point.
This latest vulnerability differs from previous Gemini-based Android lock screen bypass bugs that have been reported since September 2025. The current method requires a specific multi-touch gesture to circumvent authentication.
Normally, if Gemini's access to messaging applications like SMS is revoked, attempting to send a message via Gemini from the lock screen prompts the user to enter a PIN. However, the vulnerability allows an attacker to bypass this authentication. By simultaneously pressing the "Continue" button and Gemini's "Add attachment" button, the device permits the SMS to be sent without requiring the PIN.
Furthermore, once this initial bypass is achieved, an attacker can then enable Gemini's access to other previously disconnected applications, such as WhatsApp. This is done by invoking the relevant prompt, for instance, by typing "@WhatsApp" in Gemini's text input window. Crucially, no PIN is requested or required for this subsequent action.
The changes made through this exploit are not temporary. If the legitimate owner later unlocks their phone and reviews their Gemini settings, they will find that applications like WhatsApp have been connected to Gemini, despite no PIN ever being entered to authorize these connections.
While this vulnerability necessitates physical access to the device, it poses a risk in scenarios where a phone is lost, stolen, or temporarily left unattended.
Users concerned about this vulnerability can mitigate the risk by adjusting their Gemini settings. This involves opening the Gemini app, tapping the profile picture, navigating to Settings, and selecting "Gemini on lock screen." From there, users can either completely disable "Use Gemini without unlocking" or, as a more granular option, disable "Make calls and send messages without unlocking."
Security experts note that while Google will likely patch this specific bug, the underlying challenge remains. Each new capability granted to Gemini at the lock screen inherently expands the potential attack surface, making it more difficult to ensure that only the device owner can utilize the AI assistant's features without unlocking the phone.
