CVE-2026-21131

Samsung Flow prior to version 4.9.22.4 has an incorrect default permission that permits local attackers to initiate arbitrary activities with elevated privileges on connected devices. While the severity is classified as low, organizations using Samsung Flow should prioritize updating to the latest version to mitigate potential unauthorized access risks. This vulnerability primarily affects users with local access to the device, making it particularly relevant for environments where device security is critical.