Skip to content

UniRoot v4.1 — Stability Update

Choose a tag to compare

View all tags
@kuuky29 kuuky29 released this 12 Sep 19:06
· 3 commits to main since this release
v4.1
59b2b1d

UniRoot v4.1

One-click root for Samsung Galaxy devices — CVE-2026-43499 / dirty-pipe payloads with a KernelSU late-load.

Made by kuuky

⚠️ I am not responsible for bricked phones.

🆕 What's new since v3.5

KernelSU / KernelSU Next switch (home page)

Two buttons right on the home screen, above the profile selector. The flavor you pick decides everything: which profiles are listed, which ksud is staged, and which manager is relaunched when root succeeds. Each flavor has its own profile set:

  • KernelSU — S25 ZZHL / ZZI4, S93XX, S26 Ultra ZZHK, Oppo, RMG profiles
  • KernelSU Next — S93XX Next, S25 ZZHL Next, S25 ZZI4 Next (KSUD NEXT S938X), S26 Ultra ZZHK Next (KSUD NEXT S948X)

Auto-root on boot — reworked

  • Live progress notification (Android 16 ProgressStyle — renders in the Samsung Now Bar / Live notifications on One UI 8+) tracking the real root stages: settle → exploit running → KASLR found → kernel access → late-loading KernelSU → rooted.
  • Guided toasts: "Root starts in 1 minute — check notification" at boot, "Don't touch the phone until it's done" when the exploit runs, and the final "Success — phone is rooted" / "Run failed — reboot".
  • Always-on-top "DON'T TOUCH THE PHONE" banner while the exploit runs.
  • Stop button right on the notification — cancels the automatic launch without force-stopping the app.
  • Runs once per fresh boot (boot-count guarded) and waits for Shizuku on profiles that need it.

Reliability

  • Auto-relaunch on every profile: a failed run no longer ends the session — the payload is relaunched automatically (up to 3 runs, 60 s apart; the dirty-oracle state clears itself in about a minute). Stops immediately with Reboot required when the pipe budget is exhausted.
  • Shizuku engine rebuilt on the official IShizukuService AIDL — commands now actually execute, with server-side timeouts and a sanity id check per run.
  • S26 Ultra pipeline hardened: real host-pid tracking, kill-before-retry, dirty-oracle early stop.
  • Manager relaunch fixed: after a successful root the matching manager (KernelSU or KernelSU Next, per the selected flavor) is force-stopped and relaunched through the Shizuku shell — reliable even with the app in background.

Classic S26 profile — proven binaries

The classic S26 Ultra profile keeps the original validated ksud from the September 9 root session (md5 65701a64…, the ksud-working build), unchanged.

📥 Install

  1. Download UniRoot-v4.1.apk below and install it (allow unknown sources).
  2. Pick the flavor (KernelSU or KernelSU Next) — the profile auto-detects.
  3. S26 Ultra: start Shizuku (enable its "Start on boot" for auto-root) and grant it to Uni-Root.
  4. Tap Root now — or just reboot with Auto-root on boot enabled.

Root is per boot (LKM late-load). If a run fails: reboot, then run once.

🧰 Credits

Contributors

Vikramaditya015
Assets 3
Loading