Huawei HarmonyOS and EMUI Authentication Bypass Vulnerability in the Device Authentication Module

A critical authentication bypass vulnerability has been identified in the device authentication module of Huawei HarmonyOS and EMUI. This vulnerability allows for successful exploitation that could bypass authentication mechanisms, potentially leading to unauthorized access or actions. It affects several versions of HarmonyOS and EMUI, with specific mentions of HarmonyOS 6.0.0, HarmonyOS 5.1.0, and various EMUI versions.

Impact

Exploitation of this vulnerability bypasses authentication, which could lead to unauthorized access or actions within the affected system or application.

Remediation

Users can apply the March 2026 security update, which includes a patch for this vulnerability. Instructions for downloading this update can be found on the Huawei support website.