- BIST10011,722-2.89%
- USD49.45+0.05%
- EUR55.62+0.37%
- GOLD4,181.10+0.26%
- INTEREST37.00%-1.00
- BITCOIN81,366-0.17%
- October 17, 202610°
- BIST10011,722-2.89%
- USD49.45+0.05%
- EUR55.62+0.37%
- GOLD4,181.10+0.26%
- INTEREST37.00%-1.00
- BITCOIN81,366-0.17%
- October 17, 202610°
KARR and SWDS security devices' Bluetooth vulnerability leaves 2.2 million vehicles at risk
University of California San Diego researchers have announced that a Bluetooth vulnerability in dealer-installed KARR and SWDS security devices affects approximately 2.2 million vehicles. The flaw allows doors to be unlocked and the alarm to be silenced.
Researchers at the University of California San Diego (UC San Diego) in the US have identified a critical security flaw in KARR and SWDS security devices installed by car dealerships on vehicles. This Bluetooth vulnerability exposes approximately 2.2 million vehicles to unauthorized access.
According to the research, an attacker within approximately 5 meters of a vulnerable vehicle can connect to the device via Bluetooth. Through this connection, they can lock or unlock doors, silence the alarm, sound the horn, or turn on headlights. They can also prevent a parked vehicle from being started. However, the researchers noted that the vulnerability does not allow starting the engine or stopping a moving vehicle. As a result, the flaw alone does not lead to vehicle theft, but the silent opening of doors can pave the way for thieves to gain physical access and program a key using other methods.
What are KARR and SWDS systems?
KARR systems are additional security products installed by dealerships after the vehicle leaves the manufacturer's factory. They can offer features such as alarm, GPS tracking, remote vehicle control, and ignition immobilization. Southwest Dealer Services (SWDS) markets these devices under names like KARR Security, KARR Fusion, KARR BT, KARR S.W.A.T., and S.W.A.T. Dealer.
These devices are not factory-installed on brands like Cadillac, Hyundai, and Ford; they are fitted by the dealer or its supplier after the vehicle arrives at the dealership. Dealers typically use the system to protect inventory vehicles. When a customer purchases the car, the dealer may offer the system as an extra security package. The problem is that some dealers may leave the device connected in the vehicle even if the customer declines the service. In this case, the driver can be driving around with a vulnerable module without an active KARR account and without knowing the device is there.
How does the Bluetooth vulnerability work?
The KARR device communicates with a smartphone app via Bluetooth Low Energy (BLE). The researchers discovered that all affected devices use the same secret authentication key. Once this key is obtained, accepted commands can be sent to all vulnerable KARR devices.
This is akin to giving the same unchangeable password to a large group of devices. Once the password is learned, access to every device becomes easier. It was also noted that the devices broadcast recognizable Bluetooth signals, and historical databases could reveal where a specific device has been seen, creating a privacy issue beyond car theft.
Which vehicles might have these devices?
UC San Diego researchers most frequently encountered the devices in vehicles sold at Honda, Toyota, Mazda, Ford, and Jeep dealerships in Southern California since 2017. However, this list does not mean other brands are safe. KARR works with over 3,000 dealerships nationwide. As vehicles change hands through used car sales, auctions, and dealer trades, the make and model alone are not enough to verify the device’s presence. What matters is whether the selling dealer installed the device.
How to tell if your vehicle has a hidden KARR device
First, look for a sticker on the lower corners of the driver-side window that reads KARR, KARR Security Systems, SWDS, or S.W.A.T. Finding the sticker is a strong indicator that the device was installed; however, the absence of a sticker does not guarantee the device is not present.
Next, slide the driver’s seat back and inspect the underside of the dashboard beneath the steering wheel with a flashlight. You might see a small button or indicator light. Do not touch any wires or disassemble anything; the module may be connected to the ignition system.
Scan your vehicle’s sales documents (purchase agreement, dealer addenda, financing paperwork, service records) for terms like KARR Security, KARR BT, KARR Fusion, SWDS, Southwest Dealer Services, dealer alarm, or vehicle recovery system.
Call the selling dealer and ask them to look up your VIN. Ask, “Was a KARR, SWDS, KARR BT, S.W.A.T., or similar security module installed on the vehicle with this VIN by your dealership or your supplier?” Also confirm whether the device is still connected and whether it received the firmware update released on July 20, 2026.
You can also download the official KARR Security app, stand next to the vehicle, and perform a VIN lookup by tapping the customer service link in the app. The app will guide you through the update.
How to update the KARR security system
Acrisure released a firmware patch on July 20, 2026, one day before UC San Diego publicly disclosed the vulnerability. The update should be installed via the official KARR Security app while near the vehicle. Updating your phone or the vehicle’s infotainment system does not affect the module.
If you have an active KARR system, log into the app, select the vehicle, and follow Settings > Check for Updates. For a system you never activated, download the app, sit in the driver’s seat, tap the Customer Service link, and complete the update with VIN verification. If the app cannot find the vehicle, call KARR support at 800-395-5277.
Should the KARR device be removed?
You can request that the device be deactivated or removed. However, experts warn that this is not a simple task. Removal may require opening the dashboard, cutting wires, and repairing connections related to the ignition system. Cutting the wrong wire could prevent the vehicle from starting or affect the factory alarm. Southwest Dealer Services states that removal, transfer, or deactivation can be requested by verifying account details at 800-395-5277. It is recommended to have the original dealer or a qualified automotive electrician perform the work and to obtain written confirmation afterward that the module has been removed.
Statement from KARR Security
A KARR Security official said, “We enforce strict standards to protect our customers’ vehicles. UC San Diego researchers identified a BLE-based vulnerability affecting a small percentage of KARR devices with specific Bluetooth components. The security flaw described in the research is extremely complex and poses a low risk to customers in real-world conditions. Nonetheless, we responded quickly and developed a firmware update to address the issue. We released this app/firmware update on July 20, 2026. Active customers can apply the update securely from their phones. Owners of inactive systems can also update via the app by verifying with the last 8 digits of their VIN.”
The company also added that they have no knowledge of this vulnerability being used to enter or steal a vehicle in the real world.
Methods that will not fix this Bluetooth vulnerability
Turning off your phone’s Bluetooth does not disable the Bluetooth radio inside the KARR module. Deleting the app does not remove the device. Removing the car from your phone’s regular Bluetooth menu also does not apply the patch. The KARR module communicates independently of the vehicle’s infotainment system. Faraday pouches can prevent key fob relay attacks but will not fix this vulnerability.
Stay Updated with Ally Daily
Subscribe to be informed about special news, developments and announcements. We will keep you informed.
By signing up, you agree to our Privacy Policy
