# WhatsApp Android security vulnerability > Live situation record from CLSTR: https://clstr.news/situations/20260906-whatsapp-android-security-vulnerability > Updated: 2026-09-05T00:59:48.000Z. Sources: 16. Developments: 2. A security vulnerability has been identified in WhatsApp for Android that allows unauthorized access to a device’s photo gallery while the phone remains locked. The flaw is linked to the video call interface; when a call is answered from the lock screen, a user can navigate to the effects or backgrounds menu and use Meta AI functions to trigger the local photo gallery, bypassing the need for a PIN, password, or biometric authentication. The vulnerability affects various manufacturers, including Google Pixel and OPPO, but does not appear to impact Samsung Galaxy devices, which maintain security prompts. iOS users are unaffected due to native system protocols. Security researcher Jose Rodriguez identified the flaw, noting that while an attacker cannot send or open specific files through this view, they can see thumbnails of private photos, which could be photographed by an external camera. Meta has reportedly released a patch to address the issue, and users are advised to update their WhatsApp application immediately. ## Timeline ### 2026-09-05: WhatsApp security flaw allows access to private photos on locked Android devices A WhatsApp security flaw on certain Android devices allows attackers with physical access to view private photo thumbnails via video call menus, even if the phone is locked. A patch has been released. 4 sources. https://clstr.news/cluster/whatsapp-security-flaw-allows-photo-access-on-locked-android-phones ### 2026-09-03: WhatsApp security flaw allows Android photo access while locked A WhatsApp security flaw on certain Android devices allows physical access to private photo galleries via the video call interface without unlocking the phone. Samsung devices remain protected. 12 sources. https://clstr.news/cluster/whatsapp-security-bug-allowed-android-lock-screen-bypass --- Cite as: WhatsApp Android security vulnerability. CLSTR, https://clstr.news/situations/20260906-whatsapp-android-security-vulnerability