CVE-2026-21131

Awaiting Analysis Awaiting Analysis - Queue

Incorrect Default Permissions in Samsung Flow Allow Privilege Escalation

Publication date: 2026-10-12

Last updated on: 2026-10-15

Assigner: Samsung Mobile

Description

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-12

EPSS Evaluated

2026-10-18

NVD

CVE-2026-21131

EUVD

EUVD-2026-97195

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	samsung_flow	to 4.9.22.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability is due to incorrect default permissions in Samsung Flow software versions before 4.9.22.4. It allows local attackers to execute arbitrary activities with the same privileges as Samsung Flow on a connected device.

Detection Guidance

Detection requires checking Samsung Flow version and permissions. Verify installed version is 4.9.22.4 or higher. Check for unauthorized activity launches via system logs or Samsung Flow logs.

Impact Analysis

An attacker could exploit this to run unauthorized actions on your device with Samsung Flow's privileges, potentially accessing sensitive data or performing actions without your consent.

Compliance Impact

The vulnerability allows local attackers to launch arbitrary activities with Samsung Flow privileges, which could lead to unauthorized access or data exposure. This may impact compliance with standards like GDPR or HIPAA by increasing the risk of data breaches or unauthorized processing of sensitive information.

Mitigation Strategies

Update Samsung Flow to version 4.9.22.4 or later to address the incorrect default permission issue.

Hi! I’m here to help you understand CVE-2026-21131. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70