2.2 Million Vehicles Exposed to KARR Bluetooth Security Flaw

Researchers disclosed a Bluetooth vulnerability in the dealer-installed KARR Security System affecting an estimated 2.2 million aftermarket units; attackers within Bluetooth range could unlock vehicles, disable alarms, activate horns/lights, or prevent vehicles from starting. A universal authentication key embedded in the official smartphone app enabled proof-of-concept attacks; Acrisure Protection Group released a firmware update on July 20 and owners are urged to update via the KARR iPhone/Android app. The flaw does not affect factory-installed vehicle software or Apple CarPlay, researchers found no evidence of active exploitation, and the issue requires Bluetooth proximity to exploit.