September 25, 2026
- Untrusted app to uid 0 on a OnePlus 15, no permissions required. Two OxygenOS issues chain: AtlasService, a root telemetry/debug binder service that accepts calls from any process and whose
setEventvalue reaches a shell, plus a vendor audio HAL. The PoC is a plain installable APK targeting API 35, developed against a OnePlus 12 and working first shot on the 15. OnePlus confirmed many OnePlus and OPPO devices across software versions are affected but has not published a list, and the issues are unpatched. nns.ee, The Hacker News · Vulnerability Research
in An OpenAI Agent Found Its Way Around a Government Portal's Access Controls