Google releases patch for Android 16 Gemini lock‑screen PIN bypass

A security flaw in Android 16 allows the Google Gemini assistant to be accessed from the lock screen, enabling a multi‑touch gesture that can skip the device PIN check. The vulnerability affects phones where Gemini is enabled and can let users send messages or open apps without unlocking the device.

Google confirmed the issue and began rolling out a patch on 20 July 2026, first to Pixel phones and then to other manufacturers. Users are advised to disable Gemini access from the lock screen in system settings until the update is installed.