CVE-2026-21134

Awaiting Analysis Awaiting Analysis - Queue

Improper Authentication in Samsung Flow

Publication date: 2026-10-12

Last updated on: 2026-10-16

Assigner: Samsung Mobile

Description

Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-12

EPSS Evaluated

2026-10-18

NVD

CVE-2026-21134

EUVD

EUVD-2026-97198

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	samsung_flow	to 4.9.22.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper authentication issue in Samsung Flow software versions before 4.9.22.4. It allows attackers within close physical proximity to bypass authentication and access sensitive information without proper credentials.

Detection Guidance

This vulnerability involves improper authentication in Samsung Flow versions prior to 4.9.22.4. Detection requires checking installed versions of Samsung Flow and monitoring for unauthorized access attempts. No specific commands are provided in the context.

Impact Analysis

If you use Samsung Flow prior to version 4.9.22.4, an attacker nearby could access your sensitive data such as files, messages, or personal information stored or transmitted through the app. This could lead to privacy breaches or identity theft.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information. Organizations using affected versions may face compliance violations and potential fines.

Mitigation Strategies

Update Samsung Flow to version 4.9.22.4 or later to address the improper authentication issue.

Hi! I’m here to help you understand CVE-2026-21134. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70