OnePlus Security Vulnerabilities Allow Root Access

A security issue in OnePlus software allows installed Android apps to gain root access to devices without requiring special permissions. Security researcher Rasmus Moorats has identified two vulnerabilities in the current version of OxygenOS that enable attackers to gain the highest level of control over a OnePlus 15. The vulnerabilities have been classified as critical, as they allow malicious applications to make profound changes to the system without the user's knowledge. Moorats has confirmed that the same security flaws are also present in other devices from OnePlus and OPPO, significantly expanding the scope of the problem. OnePlus has responded to the discovery but has not released specific details regarding a potential patch or a timeline for addressing the vulnerabilities.

The vulnerabilities could potentially affect millions of users, as OnePlus and OPPO distribute a large number of devices worldwide. The flaws have not been publicly named, but Moorats has detailed them in a blog post. He explained that the combination of the two errors allows an attacker to gain root rights, meaning they have complete access to the operating system and installed applications. The vulnerabilities could also be significant for other Android devices, as similar software architectures are used. Experts warn that users should be cautious about which apps they install, especially if they do not request special permissions.

The discovery of these vulnerabilities comes at a time when the security of mobile devices is increasingly coming into focus. More and more users are becoming aware of the risks associated with installing applications from unknown sources. The possibility that an app can gain root access without the user's knowledge heightens these concerns. The vulnerabilities have been classified as CVE-2026-XXXX and CVE-2026-YYYY, although the exact CVE IDs have not yet been released. Security researchers recommend regularly checking devices for updates and only installing trusted apps from official sources.

The discussion about the security of Android devices is further fueled by this discovery. Users and experts are calling on manufacturers like OnePlus and OPPO to communicate more transparently about security issues and to provide quicker solutions. The companies' response to this security threat will be crucial in maintaining user trust. The vulnerability could also have legal consequences for OnePlus and OPPO, especially if data losses or thefts occur. Users have a right to security and privacy, and companies are obligated to secure their products accordingly.

The exact number of affected devices is still unclear, but estimates suggest that several million users worldwide could be impacted. OnePlus has announced that it will investigate the situation and is expected to provide further information in the coming weeks. Rasmus Moorats emphasized in his blog post that the discovery of these vulnerabilities should serve as a wake-up call for the entire industry. "The security of mobile devices must be a top priority, and manufacturers need to act more proactively to prevent such issues," he said.