CVE-2026-21134
MediumCVSS 6.1Summary
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
Risk Assessment
An attacker in proximity (e.g., on the same network) can access sensitive data transmitted or stored by Samsung Flow. This may lead to information leakage.
Recommendation
Update Samsung Flow to version 4.9.22.4 or later. Avoid using the application on untrusted networks.
Other vulnerabilities in Samsung Flow
See all- CVE-2026-21133Medium
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
- CVE-2026-21131Low
Incorrect default permission in Samsung Flow before version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
Original NVD description (English source)
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS