A OnePlus 15 with the latest OxygenOS can be rooted by an app installed by the owner, requiring no special permissions This article explores vulnerabilities oneplus software. . A researcher, Rasmus Moorats, discovered two vulnerabilities in OnePlus's software that, when combined, allow for root access, the highest level of control over an Android device.

The firm indicated a fix would be implemented, but emphasized "the exclusive final right of vulnerability disclosure." The developer was informed that even after the fix is released, researchers will not be permitted to publish comprehensive technical details independently. This action grants root access, but it is confined to a restricted dumpstate zone, limiting the app's capabilities.

This time, the command runs in a zone that grants all low-level Linux privileges, including the ability to load kernel code, giving the app full control of the device at the system level. Since OnePlus did not assign a CVE number or release a fix, and no OnePlus advisory named the flaws, the only practical defense against the attack is to only install apps from trusted sources, as the malicious app is necessary for it to run. In August, Lukas Maar, a researcher at the security firm Calif, demonstrated a different method that allowed a non-permissioned app to root locked Samsung, Xiaomi, OPPO, OnePlus, and Realme devices by exploiting code added to the Android operating system.