YellowKey: BitLocker Bypass Discovered in Windows

The “YellowKey” vulnerability disclosed on May 12, 2026, allows attackers with physical access to bypass BitLocker encryption on Windows 11 and Windows Server 2022/2025, gaining full access to protected data without a recovery key or PIN. Microsoft has not yet confirmed the issue or released a patch. Ref: https://blackfort-tec.de/en/insights/yellowkey-bitlocker-bypass-windows-11-vulnerability