2 million vehicles vulnerable to Bluetooth hack unlocking doors
KARR security system allows remote unlocking of car doors via Bluetooth vulnerability.
1Widespread security vulnerability
A third-party device called KARR Security System exposes at least 2 million vehicles to Bluetooth hacking risks. This serious flaw enables unauthorized door unlocking, horn activation, and even engine blocking, posing particular danger to used car owners unaware of the device's presence.
2Affected vehicle models
The KARR device was installed in various models from major brands including Honda, Toyota, Mazda, Ford, and Jeep, primarily for dealership inventory tracking. Many current drivers remain unaware these devices might still be active in their purchased vehicles.
3How the exploit works
UC San Diego researchers discovered a universal authentication key (akin to '1234') shared across all KARR devices. Using a custom-built app, hackers can establish Bluetooth connections to gain unauthorized control over vehicle systems.
4Patch availability issues
While Acrisure Protection Group released a software update in July 2026, many drivers never subscribed to the service and won't receive the fix. Physically removing the device isn't recommended as it may damage vehicle electronics.
5New theft methodology
Researchers demonstrated how thieves could silently enter vehicles and use readily available locksmith tools to clone keys from the car's computer. This approach leaves less evidence than traditional break-in methods.
6Identification markers
Affected vehicles typically bear 'KARR' or 'SWDS' (Southwest Dealer Services) stickers on driver-side windows. A small blinking button under the dashboard also indicates the device's presence.
7Manufacturer's response
KARR Security claims the vulnerability is 'highly complex' and poses 'low real-world risk,' contrary to cybersecurity experts calling it one of the worst car hacking threats in recent years.
8Recommended actions
Experts advise KARR app users to immediately install updates or consult authorized service centers. This incident highlights critical IoT security standards gaps in automotive systems.
Original article: Popular Science — 2 milyon araç Bluetooth hackiyle risk altında