Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic error in the code," according to a description of the bug in the NIST National Vulnerability Database

Reported facts: Google disclosed and patched a high-severity privilege escalation vulnerability (CVE-2026-58704, CVSS 8.0) in the Pixel Cellular Modem that was already being exploited in the wild, caused by a logic error leading to a permission bypass. This affects the device’s baseband/modem component rather than any AI model or agent directly. RealGround analysis: While not an AI-specific bug, exploitation of mobile modem vulnerabilities can indirectly impact AI security by enabling deeper device compromise, which in turn may expose AI apps, agents, or sensitive data they process if the phone is used for AI workloads. Organizations relying on mobile devices for AI-enabled business processes should incorporate hardware/firmware SBOM and supply-chain review, and ensure timely patching as part of their AI Security Readiness and supply-chain governance.