On Android Automotive OS Multi‑User Multi‑Display, a physical occupant of a passenger display can view sensitive heads‑up notifications and trigger secure passenger‑user pending intents without authentication. This occurs because the HUN system checks only the driver’s global keyguard state, ignoring the passenger keyguard, and the PassengerKeyguard implementation does not suppress HUNs or intercept intent actions. The result is accidental disclosure of private notification data and execution of privileged passenger‑user actions without credential verification.

The vulnerability affects Google Android Automotive OS (AAOS) Multi‑User Multi‑Display passenger displays. No specific software version is listed in the advisory. The flaw applies to any configuration where the passenger display can show heads‑up notifications and the passenger keyguard is intended to protect the user.

The exploit requires physical access to the passenger display, which is likely in a vehicle environment, making it a local, non‑network attack vector. Since EPSS is not computed and the vulnerability is not in the CISA KEV catalog, publicly documented exploitation probability is unknown, though the flaw would allow qualified attackers to obtain highly sensitive data or escalated access. The flaw is a high‑impact improper access control vulnerability as indicated by CWE-284.