2.1
Low
CVE-2026-21131 Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary…
Description
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Flow 4.9 | earliest → < 4.9.22.4 | 4.9.22.4 |
Other CVEs of Samsung Flow
The 11 CVEs of Samsung Flow →
CVE-2026-21134
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive…
6.1
Medium
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data
5.1
Medium
CVE-2025-20972
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers…
6.2
Medium
CVE-2025-20971
Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung…
5.5
Medium