A loophole in WhatsApp for Android can show private photos on a locked phone, 9to5Google reports.
The issue needs physical access to the handset. 9to5Google says a WhatsApp video call on the lock screen can still reach the app’s video-call effects and filters path, where a photo preview appears before the device asks for a PIN or biometrics.
What the WhatsApp for Android loophole does
9to5Google’s Ben Schoon, citing researcher Jose Rodriguez (@VBarraquito) and tests by NotebookCheck, says this is not a remote break-in and does not unlock the rest of the phone. Other apps and settings stay behind the lock screen. Photos can still be seen on the display.
Notebookcheck‘s Yuval Goel, writing earlier on 2 September 2026, says the behaviour has been reported to Meta and Google. 9to5Google says it was reported to WhatsApp and Google. Neither outlet quotes a public statement from Meta, WhatsApp or Google, and 9to5Google says no update has been announced.
Pixel and Oppo exposed; a tested Galaxy and iPhone are not
The split is by maker, not a blanket Android problem.
NotebookCheck tested a Pixel 6 Pro on Android 17 and an Oppo K13 on ColorOS 16, and found both allowed photos to appear without unlocking. 9to5Google summarised that as Pixel and Oppo devices allowing the bypass.
A Samsung Galaxy S25 Ultra on One UI 8.5, also tested by NotebookCheck, forced the lock screen before that path continued. 9to5Google put the same finding as a Galaxy device requiring unlock. That is one tested Galaxy, not a claim about every Galaxy phone.
iPhone is unaffected. 9to5Google says WhatsApp is forced to use the native iOS calling interface. NotebookCheck names Apple’s CallKit as the reason the custom WhatsApp screen never appears on a locked iPhone.
MakeUseOf later said its own checks found a Motorola Razr Fold and a Tecno Pova 6 unaffected, with inconclusive results on a Samsung Z Fold 8. Those extra units are not in the 9to5Google piece.
WhatsApp is widely used in the UAE, including for group chats that already sit on most people’s home screens. Pixel and Oppo owners here should treat the device list as named test units, not a census of what is on sale locally.
Limited photo access until a patch is confirmed
Until WhatsApp or Google ships a confirmed patch, 9to5Google’s published workaround is to set WhatsApp’s photo and video access to limited in Android’s app permissions. Google’s Android Help page covers how to change an app’s Photos and videos permission.
No patch is confirmed as of 2 September 2026. Limit WhatsApp’s photo access in the meantime.
Does this WhatsApp loophole affect iPhone?
No. 9to5Google says WhatsApp on iPhone is forced to use the native iOS calling interface. NotebookCheck names Apple’s CallKit as the reason the custom WhatsApp screen, and therefore this photo path, does not appear on a locked iPhone.
Which Android phones are affected?
NotebookCheck found a Pixel 6 Pro on Android 17 and an Oppo K13 on ColorOS 16 allowed photos to appear without unlocking. 9to5Google summarised that as Pixel and Oppo devices. A Galaxy S25 Ultra on One UI 8.5 forced an unlock. MakeUseOf separately found a Razr Fold and a Tecno Pova 6 unaffected, and was inconclusive on a Samsung Z Fold 8. This is not a claim that every Android phone is exposed.
Has WhatsApp or Google released a patch?
No patch has been announced. 9to5Google and NotebookCheck both say the issue was reported to WhatsApp or Meta, and to Google. Neither outlet quotes an official public statement, and 9to5Google says no update has been announced as of 2 September 2026.
How do I limit WhatsApp’s access to photos on Android?
9to5Google’s published workaround is to set WhatsApp’s photo and video access to limited in Android’s app permissions. Google’s Android Help page on changing app permissions covers the Photos and videos setting. That is a hardening step, not a way to trigger the flaw.
Can this happen over the internet?
No. NotebookCheck and 9to5Google both describe a locked handset that someone is holding. 9to5Google also says the rest of the lock screen still blocks other parts of the device.
