‼️ OnePlus confirmed a stock phone could be rooted by an installed app. Then it warned the researcher not to publish.
The app needs no special permissions. OnePlus confirmed the two flaws in May, but no fix was available when the researcher disclosed them. No real-world exploitation is known.
How the root chain works →