Anthropic reports that Claude helped combine Android USB pairing and permission weaknesses to obtain data from a locked Pixel 9 in a laboratory scenario. The attacker had to physically possess the vulnerable phone and connect a USB host; this was not a remote zero-click exploit. The demonstration bypassed a six-digit pairing confirmation and used a…
Inspect the ClaimsCase · DiggingBeagle record
Claude-assisted Pixel 9 research bypassed USB pairing on a locked physical phone
Anthropic reports that Claude helped combine Android USB pairing and permission weaknesses to obtain data from a locked Pixel 9 in a laboratory scenario. The demonstration bypassed a six-digit pairing confirmation and used a raw-file fallback path to extract test photos.
Scope
The attacker had to physically possess the vulnerable phone and connect a USB host; this was not a remote zero-click exploit. No field victim or broad Android-device exposure was established, and the report says Google fixed the defects.
Assessment profile
Assessment method- Setting
- research demonstration
- Exploitation
- demonstrated
- Evidence
- Grade B
- Remediation
- fixed reported
- AI role
- WITH AI
Basis and provenance
The cited primary technical report or advisory supports the stated mechanism within its reported scope. The assessment does not infer a production breach, a victim count or a comparable impact score from a laboratory result. The vendor reports that the affected product was repaired; independent regression reproduction was not performed. Boundary: The physical-custody condition matters more than the model name.
Assessed Oct 29, 2026 using diggingbeagle.assessment/1.
Evidence basis: CLM-CP23-ANTHROPIC-PIXEL9-USB-1 · CLM-ENRICH-20261029-04 · Anthropic Frontier Red Team: five disclosed model-assisted exploit chains
At a glance
The demonstration bypassed a six-digit pairing confirmation and used a raw-file fallback path to extract test photos.
Read the implicationsNo field victim or broad Android-device exposure was established, and the report says Google fixed the defects.
Limits and uncertaintyFull account
Anthropic reports that Claude helped combine Android USB pairing and permission weaknesses to obtain data from a locked Pixel 9 in a laboratory scenario.
The attacker had to physically possess the vulnerable phone and connect a USB host; this was not a remote zero-click exploit. The demonstration bypassed a six-digit pairing confirmation and used a raw-file fallback path to extract test photos.
No field victim or broad Android-device exposure was established, and the report says Google fixed the defects. Install the appropriate Pixel update and independently verify locked-device USB pairing and file access denial.
Evidence interpretation and control boundary. The physical-custody condition matters more than the model name. The reported sequence combines unauthorized USB pairing with a separate file-transfer permission fallback; removing either required primitive can break the demonstrated data path. A locked handset with patched USB policy should be tested using real lock-state and pairing transitions, not by checking whether its screen merely remains locked.
Mechanism and trust boundary
- 01
Step
- 02
Step
- 03
Step
Timeline
- Oct 27, 2026disclosure
Public disclosure
Claims & evidence
CLM-ENRICH-20261029-04In the reported Pixel 9 demonstration, possession of the locked device and a connected USB host were prerequisites for bypassing pairing confirmation and accessing test photos; this was not a network-only attack.supported
Basis: reported finding
- supportsAnthropic Frontier Red Team: five disclosed model-assisted exploit chainsprimary disclosure
Anthropic report: Chapter 3, Android lock screen and USB pairing bypass
CLM-CP23-ANTHROPIC-PIXEL9-USB-1Anthropic reports that Claude helped combine Android USB pairing and permission weaknesses to obtain data from a locked Pixel 9 in a laboratory scenario. The attacker had to physically possess the vulnerable phone and connect a USB host; this was not a remote zero-click exploit. The demonstration bypassed a six-digit pairing confirmation and used a raw-file fallback path to extract test photos.supported
Basis: reported finding
- supportsAnthropic Frontier Red Team: five disclosed model-assisted exploit chainsprimary disclosure
Anthropic report: Chapter 3, Android lock screen and USB pairing bypass
Implications
The demonstration bypassed a six-digit pairing confirmation and used a raw-file fallback path to extract test photos.
Controls and mitigations
- Install the appropriate Pixel update and independently verify locked-device USB pairing and file access denial.
Unknowns and contradictions
- No field victim or broad Android-device exposure was established, and the report says Google fixed the defects.
Sources and citation
Material revision history
- Oct 29, 2026 · Canonical change recorded · new in release · revision 202