Samsung Galaxy phones can be rooted without unlocking bootloader using new “Root My Galaxy” tool

Developers have released an open‑source utility called **Root My Galaxy** that provides temporary root access on select Samsung Galaxy smartphones without unlocking the bootloader or disabling Knox. The tool exploits the kernel vulnerability CVE‑2026‑43499, also known as “GhostLock”, to gain privileged code execution while keeping the bootloader locked and the Knox e‑fuse untouched. Consequently, security‑sensitive features such as Secure Folder, Samsung Wallet and Samsung Pay continue to function.

Root My Galaxy works on Snapdragon‑based flagship models, including the Galaxy S24 Ultra, S25 Ultra, S25 Plus, S25 Edge, Z Fold 7 and several other S24 series devices. The root privilege is granted only until the device is rebooted, after which the method must be re‑executed. The exploit remains functional on devices running June‑2026 security patches and, according to user reports, still works on July‑2026 updates; Samsung may close the flaw with an August‑2026 patch. The tool does not modify the boot image or the Knox Warranty Bit, preserving the integrity of Samsung’s hardware‑based security.