It accepts unsigned firmware over an unauthenticated Bluetooth link.

Research post: blog.nns.ee/2026/06/03/katana-badusb/