Lockscreen bug can let hackers bypass security via Gemini AI on Android phone; Google to roll out security fix soon - Deccan Herald

What the report says

Deccan Herald reported that Google is preparing a fix for an Android lockscreen vulnerability that could allow someone with physical access to a phone to use Gemini AI to send messages without first unlocking the device. The report, published on 20 July 2026, said Google has acknowledged the flaw and plans to issue a security patch soon, with the article indicating a rollout expected this week.

According to the report, the exploit involves interacting with the phone’s lockscreen and using a sequence of simultaneous button presses to get around PIN authentication. If successful, the attacker could use Gemini-related permissions to perform actions such as sending messages, and the report also warned of possible access to certain phone settings or sensitive information if permissions are enabled.

The article emphasized that the attack is not described as a remote hack: it requires the attacker to have the handset in hand and to understand the specific technique. Even so, the risk matters because a brief period of unattended access in a public place, workplace or shared environment could be enough to misuse a device, including in ways that could damage the owner’s reputation.

Until Google’s patch is available and installed, Android users are advised to keep phones updated and avoid leaving devices unattended. General security hygiene also applies: review assistant and messaging permissions, enable strong lockscreen protections, and install system updates promptly when the official security fix reaches the device.