Story perspectives

Chaotic Eclipse Unveils GreatXML BitLocker Bypass, No Patch Yet

6/12/2026

Summary

Story summary

On June 10 2026, Chaotic Eclipse released the GreatXML exploit that bypasses BitLocker.
GreatXML copies unattend.xml and a Recovery folder to the recovery partition, reboots into WinRE, and opens a command shell on BitLocker-protected volume.
Will Dormann says the write-up is flawed because the required Defender scan already needs an admin user.
Microsoft has not patched GreatXML and said the vulnerabilities were disclosed without prior notification to its Security Response Center.

1 of 1

Story summary

On June 10 2026, Chaotic Eclipse released the GreatXML exploit that bypasses BitLocker.
GreatXML copies unattend.xml and a Recovery folder to the recovery partition, reboots into WinRE, and opens a command shell on BitLocker-protected volume.
Will Dormann says the write-up is flawed because the required Defender scan already needs an admin user.
Microsoft has not patched GreatXML and said the vulnerabilities were disclosed without prior notification to its Security Response Center.