Google’s Gemini AI has introduced several useful features to Android devices, but a recently discovered Android 16 lock screen vulnerability has raised serious security concerns. The bug allows Gemini to send SMS messages and interact with messaging apps without requiring the device PIN, even if the user previously revoked access to those apps.
The issue was first reported in May 2026 and has since been acknowledged by Google. Security researchers demonstrated that an attacker with physical access to a vulnerable Android phone could exploit a lock screen bypass using a simple multi-touch gesture. While the vulnerability does not allow remote attacks, it still poses a significant privacy risk for users who temporarily leave their devices unattended.
Here’s everything you need to know about the Android 16 Gemini lock screen bug, which devices are affected, and the steps you should take immediately to protect your smartphone.
What Is the Android 16 Gemini Lock Screen Bug?
The vulnerability affects Android 16 devices running Gemini AI with lock screen features enabled. Normally, Android requires users to enter their PIN, password, or biometric authentication before allowing access to sensitive actions like sending text messages or opening messaging apps. However, researchers discovered that Gemini could bypass this security check under specific conditions.
The exploit reportedly involves pressing the “Continue” and “Add attachment” buttons simultaneously while Gemini is active on the lock screen. This unusual interaction bypasses the authentication requirement, allowing Gemini to perform actions that should normally require the device to be unlocked.
Even more concerning, researchers found that Gemini could re-enable access to apps such as Google Messages and WhatsApp, even after the user had revoked those permissions.
Google has confirmed the issue and stated that a security fix has been prepared for rollout through Android updates.
Why Is This Vulnerability Serious?
Although the exploit requires physical access to the device, it creates several security concerns.
An attacker could potentially:
- Send SMS messages without unlocking the phone.
- Send WhatsApp messages through Gemini.
- Re-enable permissions that the user had previously disabled.
- Access communication features that normally require PIN authentication.
- Abuse Gemini’s lock screen integration without the owner’s knowledge.
This means that if someone briefly gains possession of your phone—whether at work, in a public place, or during travel—they could misuse Gemini without needing your unlock PIN.
Which Android Phones Are Affected?
Current reports indicate that the vulnerability primarily affects:
- Android phones running Android 16
- Devices with Gemini AI enabled
- Phones using Gemini lock screen features
- Researchers specifically confirmed the exploit on:
- Google Pixel 6a
At the time of testing, the Pixel 6a remained vulnerable even after installing the latest available security updates before Google’s official fix.
Although Google has not released a complete list of affected smartphones, experts believe that any Android 16 device supporting Gemini AI could potentially be impacted, regardless of manufacturer.
Potentially affected brands include devices from:
- Google Pixel
- Samsung Galaxy
- OnePlus
- Motorola
- Nothing
- vivo
- OPPO
- Xiaomi
- realme
The vulnerability is related to Android 16 and Gemini’s lock screen integration, not to a specific smartphone brand.
How the Exploit Works
Security researchers demonstrated a surprisingly simple method. The attacker only needs temporary physical access to the phone.
The exploit uses Gemini’s lock screen interface by simultaneously pressing the Continue and Add attachment buttons. This multi-touch gesture bypasses Android’s normal authentication process, allowing Gemini to send messages without verifying the user’s identity.
Researchers also observed that this process could restore Gemini’s access to messaging apps, even if those permissions had previously been revoked.
Google has not publicly disclosed every technical detail of the vulnerability to avoid encouraging abuse before the patch is widely deployed.
Which Apps Could Be Affected?
1. Messaging Apps
The primary risk involves communication apps integrated with Gemini.
These include:
- Google Messages
- SMS applications
- Phone app
Through the vulnerability, Gemini may send messages or interact with these applications without requiring the user to unlock the device.
2. Third-Party Apps Using Gemini APIs
Security reports have also highlighted concerns for certain applications integrating Gemini-powered AI features through embedded API keys.
Examples mentioned in public reports include:
- OYO Hotel Booking
- Google Pay for Business
- Taobao
- Apna Job Search
- ELSA Speak
The reported concern is different from the lock screen bypass. It relates to developers embedding client-side API keys that could potentially be abused if attackers reverse-engineer the application. This issue primarily affects app developers and businesses rather than typical users.
How to Protect Your Android Phone
Until Google’s security patch is installed, users should take several precautionary measures.
1. Disable Gemini on the Lock Screen
Open:
Gemini App → Profile Picture → Settings → Gemini on Lock Screen
Turn off:
- Use Gemini without unlocking
- Make calls and send messages without unlocking
- This is currently one of the most effective protections.
2. Restrict Gemini App Permissions
Navigate to:
- Gemini → Apps
- Disable access for apps such as:
- Messages
- Phone
- Other sensitive applications
Limiting Gemini’s permissions reduces the potential impact of the vulnerability.
3. Switch Back to Google Assistant
Users who do not rely heavily on Gemini can temporarily switch back.
Go to:
Gemini → Profile → Switch to Google Assistant
This prevents Gemini from interacting with sensitive apps until the issue is fully resolved.
4. Install Android Updates Immediately
Google has acknowledged the vulnerability and is rolling out a fix.
Install every available:
- Android security update
- Google Play system update
- Pixel Feature Update (if applicable)
Keeping your phone updated is the best long-term protection.
5. Protect Physical Access to Your Device
Since this vulnerability requires someone to physically handle your smartphone:
- Avoid leaving your phone unattended.
- Enable strong PIN or password protection.
- Use biometric authentication where available.
- Lock your phone whenever you’re not using it.
Good physical security significantly reduces the risk of exploitation.
Should You Stop Using Gemini?
Not necessarily, Gemini remains one of Google’s most capable AI assistants, and this vulnerability requires physical access to the device rather than allowing remote compromise.
However, users should consider disabling Gemini’s lock screen capabilities until Google’s patch has been installed. Once your device receives the official fix, you can safely decide whether to re-enable those features.
Google’s Response
Google has acknowledged the Android 16 Gemini lock screen issue and confirmed that a fix is being rolled out through upcoming software updates. Users are encouraged to install updates as soon as they become available and review Gemini’s permissions in the meantime.
Final Thoughts
The Android 16 Gemini lock screen vulnerability highlights how AI-powered features can introduce unexpected security risks if they are not properly protected. Although the exploit requires physical access to the device and is not a remote attack, it could still allow unauthorized users to send messages or regain access to sensitive apps without entering the device PIN.
Google has acknowledged the issue and is rolling out a security update to address the vulnerability, making it important for users to install the latest Android and Google Play system updates as soon as they become available.
Until the official patch is fully deployed, disabling Gemini on the lock screen, restricting its access to messaging apps, and avoiding leaving your phone unattended are practical steps to reduce the risk. Staying informed about security advisories, reviewing app permissions regularly, and keeping your device updated will help ensure your personal data and communications remain protected against emerging Android security threats.