A Critical Vulnerability in OnePlus Phones Puts Millions of Users at Risk, Even with Installed Security Apps
A newly discovered vulnerability in certain OnePlus phones has been found to allow installed Android apps to gain root access without requiring explicit user permissions. This means that malicious software can exploit a flaw in the phone’s operating system and assume complete control over the device, posing a significant threat to the security of millions of users worldwide.
The issue affects all OnePlus devices running Android 10 or later, including popular models like the OnePlus 9 Pro and OnePlus 8T. Researchers at cybersecurity firm Zimperium discovered that an installed app can bypass traditional permission checks by exploiting a weakness in the device’s Android framework. This allows the malicious app to escalate its privileges and gain root access without the user ever being notified.
To understand how this works, consider the typical process of installing an app on an Android phone. When you download and install a new app, the operating system usually prompts you for specific permissions, such as access to your location or camera. However, in this case, the malicious app can exploit the vulnerability to bypass these checks and gain unrestricted access to sensitive data and system resources.
The implications of this vulnerability are significant, especially given that many OnePlus users rely on installed security apps to protect their devices from malware and other threats. Unfortunately, even with these apps in place, a compromised device can still be exploited by malicious software, rendering the user’s security measures ineffective.
The discovery highlights the importance of keeping phone operating systems up-to-date and patching vulnerabilities as soon as possible. OnePlus has acknowledged the issue and is working on a fix, but until then, users are advised to exercise caution when installing new apps and to keep an eye out for suspicious activity on their devices.
To protect yourself from this vulnerability, make sure your OnePlus phone is running the latest software version, and only install trusted apps from reputable sources. Be cautious of any app that requests unusual or excessive permissions, and consider using a security-focused launcher or task manager to monitor system activity and block potential threats.
Source: The Hacker News — 2026-09-24