Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability

Change of Plan

9+ months. One unresolved vulnerability. One disclosure published today.

Following a last-minute request from the affected vendor, we’ve temporarily taken the technical details offline and agreed to provide one final, limited window for remediation.

We believe responsible disclosure goes both ways.

The clock is running again ⏰