It's not entirely clear how the exploit works. Microsoft says it's investigating.
https://arstechnica.com/security/2026/05/zero-day-exploit-completely-defeats-default-windows-11-bitlocker-protections/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social