CVE-2026-21131

Samsung Mobile / Samsung Flow PUBLISHED

Description (CNA)

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.

Affected (CNA)

Vendor / product	Versions
Samsung Mobile / Samsung Flow	unaffected 4.9.22.4 before *

CWE

No CWE identifiers supplied.

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=10

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.