CVE-2026-21084

Improper access control in SmartThings versions prior to 1.8.47.24 enables local attackers to gain unauthorized access to sensitive information. Organizations utilizing affected versions should prioritize remediation to mitigate potential data exposure risks. This vulnerability is particularly relevant for users managing smart home devices within their networks.