​

I'm an independent user who has been documenting unusual Gemini behaviors on Android for several months.

I submitted a vulnerability report through Google's Vulnerability Reward Program (VRP).

Google officially upgraded the ticket:

- Type: Customer Issue → Bug

- Priority: P3 → P1

- Severity: S4 → S1

- Status: Assigned → In Progress (Accepted)

Google Bug Hunters confirmed that the issue had been escalated to the product team for further investigation and would be reviewed by the VRP committee.

Reward received: $0.

Approximately 180 days later, the ticket is still open.

More importantly, all the behaviors I originally reported are still reproducible on my devices. I've also observed additional related behaviors since the initial report.

I'm not claiming that a P1/S1 classification automatically guarantees a bounty.…