CVE-2026-21084 Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information

Description

Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.

Affected products and versions

Product	Affected versions	Fixed in
SmartThings 1.8	earliest → < 1.8.47.24	1.8.47.24

Other CVEs of SmartThings

The 15 CVEs of SmartThings →

CVE-2024-49416 Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to… 4.0 Medium CVE-2024-34596 Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for… 5.9 Medium CVE-2024-20852 Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows… 5.9 Medium CVE-2022-39868 Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers… 4.0 Medium