CVE-2026-21131: Samsung Flow (exact versions not specified)

Affected technology

Samsung Flow · Exact affected versions not specified by the source
Samsung Mobile

Description’s affected range: prior to version 4.9.22.4

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

Local attackers can launch an arbitrary activity with Samsung Flow privileges on the connected device. Vendor/CNA’s CVSS 4.0 assessment (base score 2.1/10) rates confidentiality, integrity and availability impact as none.