WinRE flaws enabled BitLocker secret extraction and renewed calls for pre-boot PINs

Microsoft disclosed that researchers found multiple Windows Recovery Environment (WinRE) weaknesses that could let an attacker with physical access bypass BitLocker protections and recover data from encrypted devices. The issues affected how WinRE handled unprotected files on recovery and EFI volumes during BitLocker auto-unlock, and included a Trusted WIM Boot bypass via Boot.sdi manipulation, abuse of ReAgent.xml scheduled operations through tttracer.exe and SetupPlatform.exe, and a Boot Configuration Data (BCD) parsing flaw that enabled a full Push Button Reset exploit chain to decrypt the OS volume. Microsoft said the four vulnerabilities were patched in the July 2025 Patch Tuesday release.

The disclosure prompted renewed guidance from the UK NCSC, which said BitLocker deployments without a pre-boot PIN remain exposed to known and future bypass techniques, including the YellowKey method that also abused WinRE. NCSC said the recurring problem is partly architectural because BitLocker does not encrypt WinRE-related files, leaving a persistent recovery-environment attack surface, and recommended enabling TPM+PIN to block these attacks by requiring user authentication before WinRE can be used. Where PINs are impractical, it advised alternatives including BitLocker Network Unlock, startup keys with TPM, and conditional access controls, while Microsoft also pointed customers to the REVISE mitigation to reduce downgrade risk.