CVE-2026-21131
Received Received - Intake

Incorrect Default Permissions in Samsung Flow Allow Privilege Escalation

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: Samsung Mobile

Description
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-21131
EUVD
EUVD-2026-97195

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
samsung samsung_flow to 4.9.22.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is due to incorrect default permissions in Samsung Flow software versions before 4.9.22.4. It allows local attackers to execute arbitrary activities with the same privileges as Samsung Flow on a connected device.

Detection Guidance

Detection requires checking Samsung Flow version and permissions. Verify installed version is 4.9.22.4 or higher. Check for unauthorized activity launches via system logs or Samsung Flow logs.

Impact Analysis

An attacker could exploit this to run unauthorized actions on your device with Samsung Flow's privileges, potentially accessing sensitive data or performing actions without your consent.

Compliance Impact

The vulnerability allows local attackers to launch arbitrary activities with Samsung Flow privileges, which could lead to unauthorized access or data exposure. This may impact compliance with standards like GDPR or HIPAA by increasing the risk of data breaches or unauthorized processing of sensitive information.

Mitigation Strategies

Update Samsung Flow to version 4.9.22.4 or later to address the incorrect default permission issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21131. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart