# Acrisure KARR BT devices share hard-coded Bluetooth key

Published: 2026-08-04 · Severity: medium · Sectors: transportation
Canonical: https://vorant.io/reports/c24920a1-c333-57c7-a538-47a3af1b69e3/acrisure-karr-bt-devices-share-hard-coded-bluetooth-key

> A hard-coded shared Bluetooth authentication key in Acrisure KARR BT and DR-100 anti-theft systems lets nearby attackers unlock doors and immobilize engines.

CISA published an ICS advisory for Acrisure KARR BT and DR-100 dealer-installed automotive anti-theft systems, disclosing CVE-2026-18411, a hard-coded/shared Bluetooth authentication key used across affected devices. An attacker within Bluetooth range could exploit this shared secret to issue unauthorized commands to a vehicle, including unlocking doors and immobilizing the engine, without needing device-specific credentials.

The vulnerability affects firmware versions prior to July 20, 2026, and impacts the Transportation Systems critical infrastructure sector, with deployments reported worldwide. Acrisure Protection Group has released a firmware update addressing the issue and directs affected users to apply it via published instructions. CISA notes no known public exploitation of this vulnerability has been reported at this time, and the flaw was responsibly disclosed by a University of California San Diego research team.

This is a proximity-based hardware/firmware weakness (CWE-321: Use of Hard-coded Cryptographic Key) rather than a remotely exploitable network vulnerability, limiting attack scope to Bluetooth range. Organizations and vehicle owners using affected KARR BT or DR-100 systems should apply the vendor's firmware update promptly to eliminate the shared-key weakness.

## Mentioned in this report

- Vulnerabilities: CVE-2026-18411

Source reporting: https://www.cisa.gov/news-events/ics-advisories/icsa-26-216-01

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/c24920a1-c333-57c7-a538-47a3af1b69e3/acrisure-karr-bt-devices-share-hard-coded-bluetooth-key.
Full IOC sets, deployable detections, the entity graph, TAXII 2.1 feed and real-time alerts: https://vorant.io/signup