If you have a OnePlus phone and tend to download and try out apps beyond the well-known software that everyone uses, it’s possible that someone could be reading your text messages.
Cybersecurity firm Rapid7 has warned of a critical vulnerability in OnePlus phones that allows apps to access SMS and MMS data without authorisation. And you won’t know if this has happened.
Rapid7 says: “When leveraged, the vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent.”
If you use SMS-based authentication, other apps could also be compromised.
The flaw, which Rapid7 has designated CVE-2025-10184, is present in several versions of Oxygen OS, dating back to the OnePlus 8T. The vulnerability arose when OnePlus modified the default Android telephony app during the transition to Android 12.
Foundry | Alex Walker-Todd
According to 9to5Google, Rapid7 attempted to alert OnePlus months ago, but only after the discovery became public this week did OnePlus confirm the problem. When contacted by 9to5Google, OnePlus made the following statement:
We acknowledge the recent disclosure of CVE-2025-10184 and have implemented a fix. This will be rolled out globally via software update starting from mid-October. OnePlus remains committed to protecting customer data and will continue to prioritize security improvements.
What you can do
There’s unfortunately no way to know if your SMS/MMS data has been compromised. But here are the steps you can take to protect your data from today onwards:
- Immediately uninstall any unnecessary apps, especially apps that are obscure or little-known
- Only install apps from well-known brands and providers
- Replace SMS-based two-factor authentication with an authenticator app
- Install the OnePlus update as soon as it becomes available in mid-October
And if that news has given you a gentle nudge that the time has come to upgrade, see our top recommendations for the best phones and best tablets you can buy right now.
This article originally appeared on our sister publication M3 and was translated and adapted from Swedish.
