New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

A new Windows BitLocker bypass exploit called GreatXML has been discovered that allows attackers to gain unrestricted access to encrypted volumes.

• •The exploit involves copying XML files (unattend.xml and ReAgent.xml) to the recovery partition and rebooting to Windows Recovery Environment (WinRE).
• •Systems that have used Windows Defender Offline Scan are automatically vulnerable to this bypass.
• •The researcher Chaotic Eclipse discovered this bypass in approximately 4 hours and noted it was an accidental discovery.
• •This is the second BitLocker bypass released by the same researcher, following the YellowKey exploit (CVE-2026-45585).

This summary was automatically generated by AI based on the original article and may not be fully accurate.