WhatsApp flaw lets people view photos on locked Android phones, report says

The issue involves WhatsApp's "create with AI" feature. When a video call arrives on a locked Android phone, the recipient can answer without unlocking the device. After the call connects, the phone shows an effects icon; tapping it opens filters and background options. Selecting "Backgrounds" and then tapping the icon to create a background with Meta AI allows the recipient to create a new image or edit an existing photo. Choosing to edit an existing photo appears to open the phone's gallery immediately, bypassing lock screen protections.

Jose Rodriguez demonstrated the method on X, and Android Authority said the flaw has already been reported to Meta and Google. Rodriguez wrote: "It is in plain sight. It is not hidden, not a secret feature. Not a hack."

The publication says the issue is not an exploit or a remote hack. It stems from Android manufacturers not handling lock screen restrictions properly, leaving certain features accessible before a phone is unlocked. Taking advantage of the flaw requires physical access to the device.

According to Android Authority, the problem appears to affect phones made by OPPO and vivo, while Samsung phones did not show the same behavior. The difference likely comes from how each manufacturer's custom Android build treats features that remain accessible on the lock screen.

Because the flaw was already reported to Meta and Google, Android Authority says a fix could be on the way.