NewsMV

KARR Bluetooth flaw leaves 2.2 million vehicles open to unauthorized access, patch issued July 20

7/31/2026

Computer security researchers at the University of California San Diego disclosed a Bluetooth vulnerability in dealer-installed KARR and Southwest Dealer Services security modules affecting at least 2.2 million vehicles.

Acrisure released a firmware patch on July 20, 2026, one day before public disclosure.

Owners must apply it through the official KARR Security app; updating a phone or a vehicle infotainment system does not reach the separate module.

What the flaw allows The affected devices rely on a shared secret authentication key used across every unit.