Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

A vulnerability in Bluetooth-enabled KARR aftermarket car alarms could let someone nearby unlock a vehicle, silence its alarm, flash its lights, honk its horn or disable its ignition. It does not, by itself, let an attacker start or remotely steer the car. The issue affects the add-on alarm system—not every car from a particular manufacturer—and owners should check for the system and install the vendor’s firmware update if it is present.

What the KARR vulnerability lets an attacker do

UC San Diego researchers found a weakness in Bluetooth-enabled KARR alarm systems, also identified in reporting as KARR/SWDS. According to WIRED’s July 21, 2026 report and KPBS’s July 30, 2026 report, a shared Bluetooth authentication key in the KARR smartphone app allowed the researchers to build an app that sent commands accepted by nearby vulnerable devices.

Those commands could unlock the car, disable the alarm, honk the horn, flash the lights or disable the ignition. Disabling ignition could strand a driver, but the Bluetooth flaw does not itself start the engine or give an attacker remote steering control. The demonstrated attack requires the attacker to be within Bluetooth range.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

WIRED also describes a separate car-theft technique involving physical entry and a locksmith tool. That is distinct from the Bluetooth vulnerability: it should not be taken to mean the flaw itself starts the car.

#1 Best Overall
Viper 3100V 1-Way Security System
  • 2 Stage Shock Sensor
  • Door, Bonnet & Boot Protection
  • Engine Immobilization
  • Parking Light Flash (Arm, Disarm & Trigger)
  • Keyless Entry

Which vehicles may have the affected system?

The issue is in an aftermarket alarm installed by dealers, sometimes to protect cars on dealer lots. Reporting says a KARR unit could remain in a vehicle after sale even if the buyer had not requested or activated the add-on. A car’s make or model alone does not establish whether it has the system.

Researchers estimate that more than 2 million Bluetooth-enabled KARR devices have been deployed, according to WIRED. That is an estimate based on crowdsourced WiGLE signal data and serial-number extrapolation, not a verified count of vehicles that remain vulnerable today. KPBS separately reported UCSD researcher Nishant Bhaskar’s estimate that more than 2.2 million cars had been sold in Southern California since 2017. That regional sales estimate is not an audited count of currently vulnerable cars. Researchers also found devices in the United States and other countries, so the issue is not limited to Southern California.

Rank #2
Viper 5706V 2-Way Car Security with Remote Start System
  • -Way Security + Remote Start System with 5-Button LCD Transmitter
  • 5-button sidekick remote control transmitter
  • 1 mile range
  • 4-Channel vehicle security system
  • Door and trunk triggers

WIRED reported that researchers found 97 KARR-equipped vehicles during a 20-minute scan near UCSD. This is a local field observation, not a measure of how common the system is across the broader vehicle population. Neither report establishes how many devices remain unpatched.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to check whether your car has a KARR alarm

Look for a KARR or SWDS sticker on a vehicle window. WIRED also reports that the system may have a small button with a blinking light attached beneath the dashboard. These are clues to identification, not proof that a particular unit is still vulnerable or that it has received an update.

Rank #3
Viper 350 PLUS 3105V 1-Way Car Alarm Keyless Entry,BLACK
  • 3-Channel 1-way Security System with Keyless Entry 4-Button remotes. Additional options include remote starter & GPS Tracking.
  • FailSafe starter kill.
  • Anti-carjacking & Panic Alarm Feature
  • Revenger six-tone soft-chirp siren and parking light alarm response.
  • Bright blue status LED warns thieves and gives you info about the system

If you cannot tell whether a device is installed, contact the vehicle dealer or KARR customer support for guidance. Do not assume that the system is absent simply because you do not remember buying or activating it; dealer-installed equipment may have been fitted before the sale.

How to update the KARR system

KPBS reported that Acrisure Protection Group released a firmware patch on July 20, 2026. WIRED reported that owners with the KARR app may receive an alert. For owners without it, WIRED described this update path:

Rank #4
Car Alarm System with Motion Sensor, 108dB Anti-Theft Alarm Wireless Remote
  • 【2-Pack Double Protection】: Each set includes 2 car alarm units + 1 wireless remote, so you can secure two vehicles at once, or place one on the front and one on the rear of a single car. The remote can pair with multiple hosts - great for couples, families, or a car + motorcycle combo
  • 【Smart 3D Motion Sensor, Fewer False Alarms】: Built-in 3D acceleration sensor with AI algorithm detects vibration, prying and forced entry, while intelligently filtering out noise from passing cars, rain or thunder - high sensitivity without the constant false alarms that cheap alarms cause
  • 【108dB Siren + Red Warning Light】: First vibration triggers a short beep with red flashing as a warning; a second sets off a 30-second loud 108dB siren with strobe-like flashing that scares off thieves. 3 volume levels (108/102/96dB) suit neighborhoods, lots or busy streets
  • 【Magnetic Mount, No Drilling】: A strong magnet holds the alarm in place - no tools, no wiring, no sticky residue, and you can move it between cars anytime. The anti-UV PC housing resists high heat and cold, so it stays stable even in a car parked under the summer sun
  • 【66ft Wireless Remote & Long Battery】: Arm, disarm or locate your vehicle from up to 66ft (20m) away. Powered by 2 AAA batteries, the unit runs 6+ months and the remote lasts up to 2 years. Also works for home doors, bikes, ebikes, luggage - multi-scene security
  1. Download the KARR Security app from the appropriate app store.
  2. Use the app to connect to the KARR alarm in your vehicle.
  3. In the app, select Customer Service, then Firmware Update.
  4. Follow the app’s prompts and check that the update completes.

App instructions can change, so follow the current directions from Acrisure Protection Group if the labels or steps differ. If the app cannot connect or the update fails, contact the company or a dealer for help rather than treating a failed attempt as confirmation that the device is patched.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the company says about the risk

Acrisure Protection Group characterized the vulnerability as “highly complex” and “low risk to customers under real-world conditions,” while saying it developed a firmware update. That is the company’s assessment, not an independent risk determination.

Best Value
Ring Sensors: Car Tracker and Alarm — Vehicle Location Tracking, Easy Installation, on Amazon Sidewalk, No Monthly Subscription
  • Real-time alerts — Receive notifications for impacts, door openings, and other disturbance alerts so you can act fast.
  • Track your vehicle’s location — Use the Ring app to view your vehicle on a map with period updates.
  • No ongoing fees — Track and protect your car with no monthly subscription or hidden fees.
  • Easy car installation — Start tracking your car right away with no tools, wiring, or complicated setup. Compatible with most vehicles.
  • Connects to your OBD-II Port — Powered by your car while driving, with a built-in backup battery that lasts up to 7 days when parked.

WIRED reported that researchers privately notified the company in January 2025 and that the patch arrived close to 18 months later, shortly before planned conference presentations. The company said it planned communications through its app, website and dealers; WIRED reported that it had not explained how it would reach owners who did not know a KARR device was installed.

Quick Recap

Bestseller No. 1
Viper 3100V 1-Way Security System
Viper 3100V 1-Way Security System
2 Stage Shock Sensor; Door, Bonnet & Boot Protection; Engine Immobilization; Parking Light Flash (Arm, Disarm & Trigger)
$84.99
Bestseller No. 2
Viper 5706V 2-Way Car Security with Remote Start System
Viper 5706V 2-Way Car Security with Remote Start System
-Way Security + Remote Start System with 5-Button LCD Transmitter; 5-button sidekick remote control transmitter
$283.00
Bestseller No. 3
Viper 350 PLUS 3105V 1-Way Car Alarm Keyless Entry,BLACK
Viper 350 PLUS 3105V 1-Way Car Alarm Keyless Entry,BLACK
FailSafe starter kill.; Anti-carjacking & Panic Alarm Feature; Revenger six-tone soft-chirp siren and parking light alarm response.
$119.00

What to do if you find one

  • Use the KARR Security app to check for and install the firmware update.
  • If you cannot identify the unit or complete the update, contact Acrisure Protection Group or the dealer for assistance.
  • Do not treat buying a different alarm, an OBD-II scanner or other generic anti-theft equipment as a fix for this shared-key vulnerability; the reported remedy is a firmware update for the KARR device.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.