A security vulnerability discovered on WhatsApp can enable unauthorized access to the device gallery via video calls on locked Android phones. After the call is answered, selecting the “Backgrounds” and Meta AI options in the effects menu and proceeding to “Edit an existing photo” makes the gallery visible without unlocking the phone. Security researcher Jose Rodriguez demonstrated the vulnerability on the X platform.
Tests reportedly showed that the vulnerability occurred particularly on OPPO and vivo devices, while Samsung phones were not affected. Experts said the issue may stem less from WhatsApp than from how lock-screen permissions are handled in manufacturers’ custom Android interfaces.
Why it matters
The vulnerability directly concerns users who have private photos on their phones because it weakens the security assumption that gallery content is protected while the device is locked. The fact that the tests produced results on OPPO and vivo models shows that the issue cannot be generalized to all Android phones; the brand and the interface in use may be decisive. The fact that the same result was not observed on Samsung devices also suggests that manufacturers implement lock-screen permissions differently. This situation leaves open the question of whether responsibility for the solution lies solely with WhatsApp or with permission management in manufacturers’ interfaces; it is also necessary to clarify which models and software versions are affected.
Background
WhatsApp is not a new name in the FikirPilot archive: in the last 90 days, we have published 2 news stories in which this name appeared; the latest was dated August 25, 2026.