Artificial intelligence functions are increasingly integrated into smartphones, but together with convenience can open unexpected ways of bypassing the protection. Android 16 found an error that allows Gemini to send messages from a locked device without entering a PIN code.
The problem arises on smartphones, where access to Gemini is allowed from the lock screen. There is also a video demonstration. A person with physical access to the device can call an assistant, make calls, send an SMS and contact WhatsApp with a certain gesture installed on the call of the AI assistant. Vulnerability is different from similar errors found in September 2025.
One of the scenarios works, even if the owner has disabled for Gemini access to the application "Members". When trying to send SMS, the assistant offers to open the desired application and asks to enter a PIN code. However, the simultaneous press of the buttons “Continue” and adding an attachment allows you to bypass the check and send a message without unlocking the smartphone.
After bypassing the protection, you can reconnect to Gemini applications, access to which the owner has previously banned. For example, a command mentioning WhatsApp restores the link between the messenger and the assistant without a normal identity check. After unlocking, WhatsApp is displayed in the settings as a connected application.
The error is not associated only with Pixel smartphones, but the exact list of vulnerable manufacturers and models is still unknown. A Google spokesperson confirmed the problem and said the fix was already prepared. The company plans to release an update soon. Before installing the fixture, you can reduce the risk by disabling access to Gemini from the lock screen and not leaving the smartphone unattended.
The problem arises on smartphones, where access to Gemini is allowed from the lock screen. There is also a video demonstration. A person with physical access to the device can call an assistant, make calls, send an SMS and contact WhatsApp with a certain gesture installed on the call of the AI assistant. Vulnerability is different from similar errors found in September 2025.
One of the scenarios works, even if the owner has disabled for Gemini access to the application "Members". When trying to send SMS, the assistant offers to open the desired application and asks to enter a PIN code. However, the simultaneous press of the buttons “Continue” and adding an attachment allows you to bypass the check and send a message without unlocking the smartphone.
After bypassing the protection, you can reconnect to Gemini applications, access to which the owner has previously banned. For example, a command mentioning WhatsApp restores the link between the messenger and the assistant without a normal identity check. After unlocking, WhatsApp is displayed in the settings as a connected application.
The error is not associated only with Pixel smartphones, but the exact list of vulnerable manufacturers and models is still unknown. A Google spokesperson confirmed the problem and said the fix was already prepared. The company plans to release an update soon. Before installing the fixture, you can reduce the risk by disabling access to Gemini from the lock screen and not leaving the smartphone unattended.
