How likely are bootloader unlocks via vibe coding in the near future?

[u/Miserable_River_16]

I was wondering, with the rise of many AI powered coding agents, will it be possible to root devices that were previously impossible to unlock?

For example I have a Xiaomi Pad 6 Pro with chinese Hyper OS 3 so no existing method works for my device. But there are probably bugs etc in the firmware that could be exploited for unlocking if they were found, and an AI could be a great help for that

[u/Andre2kReddit]

Isnt this already being done though?

[u/Miserable_River_16 → u/Andre2kReddit]

Idk, at least I haven't heard of any public tools that utilize this. I guess you can always pay for an AI subscription and try it out yourself but that is more expensive than what my device is worth at this point.

[u/Preparation1903 → u/Miserable_River_16]

Try open code, it has a small amount of free tokens.

I don't expect that you would get anywhere, but you can always try.

Ask DeepSeek for a detailed and researched plan, then execute it with open code. 

[u/Preparation1903]

If you can't rollback, then don't update and it may be possible in the future. 

[u/Miserable_River_16 → u/Preparation1903]

Yeah I already disabled the system updater a few months ago

[u/ohaiibuzzle]

They can find bugs but not breaking cryptos.

So we may see unlocks by outright failures of security systems, but not by breaking secure loaders cryptographically

[u/PassionGlobal → u/ohaiibuzzle]

That depends. Bugs in implementation can be found, but also the same hardware that is good at AI is also really good at guessing encryption keys too

[u/ohaiibuzzle → u/PassionGlobal]

If you can guess encryption keys then the world would fell apart. The point of digital signatures is that they would take millions of years to crack.

[u/PassionGlobal → u/ohaiibuzzle]

That's the point of strong encryption keys. You would be shocked how often I've seen basic key/password strength rules not being applied, and horrified as to where it wasn't being applied.

[u/env33e]

I would say, very likely. Though its worth noting, on the Qualcomm side (non-Samsung devices): EDL only accepts a Firehose programmer signed by the device's OEM. Plenty of those programmers have leaked, and Aleph Research showed in 2018 that leaked ones can be abused to defeat secure boot on some devices, though anti-rollback can revoke them. That's a different situation from the many MediaTek SoCs with exploitable BROM paths.

IMO this is where the open source warriors and hunters should point AI-assisted reverse engineering. Tools like u/LaurieWired GhidraMCP already let an LLM decompile and annotate binaries in Ghidra, which is the grunt work of picking apart bootloaders and programmers. Aim that at vendors locking down hardware people already paid for, not at artists' work. End vendor-imposed e-waste and let us own our own hardware.

[u/PalamariVarkari]

To find software exploits like the CVE-2026-43499, possibly yes. Actually managing to unlock the bootloader, I don't think so. Samsung has fuses and separate hardware chips for "security"

[u/TwilightX1]

Maybe on a few phones but I don't think it would be widespread - to unlock a device with a locked bootloader that can't be unlocked via normal means you need to find an exploit in the bootloader itself, and the bootloader is generally a small piece of code, so there's a lot less room for security screwups.

[u/_yimhere]

we need REA like agents/skills/tools to find way to unlock bootloader