CVE-2026-21133
MediumCVSS 5.1Summary
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
Risk Assessment
A local attacker can read clipboard contents, which may include sensitive information such as passwords or personal data. This leads to a breach of confidentiality.
Recommendation
Update Samsung Flow to version 4.9.22.1 or later. Avoid copying sensitive data to the clipboard while using the vulnerable version.
Other vulnerabilities in Samsung Flow
See all- CVE-2026-21134Medium
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
- CVE-2026-21131Low
Incorrect default permission in Samsung Flow before version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
Original NVD description (English source)
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS