KARR Bluetooth flaw exposes 2.2M cars to theft risk

Key Points:

• A Bluetooth vulnerability affecting at least 2.2 million vehicles involves dealer-installed KARR and SWDS aftermarket security devices, which can be exploited from about five yards away to unlock doors, silence alarms, or flash lights but cannot start the engine.
• KARR and SWDS devices are added by dealerships after vehicle arrival for inventory protection and may remain connected even if buyers declined the service, leaving owners unaware of the device's presence.
• Vehicle owners can check for these devices by looking for KARR or SWDS stickers on the driver-side window, inspecting beneath the dashboard, reviewing purchase paperwork, contacting the selling dealership with the VIN, or using the official KARR Security app.
• A firmware update released on July 20, 2026, addresses the Bluetooth flaw and must be installed via the KARR Security app; simply turning off phone Bluetooth or deleting the app does not fix the vulnerability.
• Professional removal of the KARR device is recommended if desired, as improper handling could disrupt vehicle electronics; meanwhile, owners should also adopt additional anti-theft measures such as steering wheel locks, secure parking, and protecting key fobs.