CVE Catalog
CVE-2026-21074
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk0.10%
1th percentile - higher than 1% of all known CVEs
Summary
Incorrect default permissions in Bixby prior to version 4.0.86.0 allow local attackers to execute arbitrary commands with Bixby privilege.
Risk Assessment
A local attacker could take control of Bixby features and perform unauthorized operations on the device.
Recommendation
Update Bixby to version 4.0.86.0 or later to fix the incorrect permissions.
Other vulnerabilities in Bixby
Original NVD description (English source)
Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.