# OnePlus OxygenOS security vulnerabilities

> Live situation record from CLSTR: https://clstr.news/situations/oneplus-oxygenos-security-vulnerabilities
> Updated: 2026-10-10T14:00:00.000Z. Sources: 5. Developments: 2.

Security researcher Rasmus Moorats identified two vulnerabilities in OnePlus’s OxygenOS that enable malicious applications to obtain full root access without user authorization or alerts. 

The exploit chains two components: a flaw in the AtlasService diagnostic component allows for limited root access to the dumpstate area, which is then escalated through a second flaw in the olc2 hardware management service. This escalation grants full low-level Linux privileges, including the ability to load code at the kernel level. 

Tests confirmed the exploit on OnePlus 12 Pro and OnePlus 15 devices running unmodified software. While OnePlus has confirmed the vulnerabilities, the company has not yet released a patch or a CVE.

## Timeline

### 2026-10-10: Android rooting: definition, benefits, and security risks

Rooting Android devices grants superuser access to modify protected system files and settings, offering customization but increasing risks like malware exposure and loss of manufacturer support.

3 sources. https://clstr.news/cluster/android-rooting-definition-benefits-and-security-risks

### 2026-09-26: OnePlus security flaws allow unauthorized root access

Security researcher Rasmus Moorats discovered two vulnerabilities in OnePlus OxygenOS that allow apps to gain full root access without user permission by chaining flaws in the AtlasService and olc2 components.

2 sources. https://clstr.news/cluster/oneplus-security-flaws-allow-unauthorized-root-access

---
Cite as: OnePlus OxygenOS security vulnerabilities. CLSTR, https://clstr.news/situations/oneplus-oxygenos-security-vulnerabilities