samsung_flow vulnerabilities
CVEs whose affected-version data names the samsung_flow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-21134Medium· 6.1Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
▾ SunlitSamsung Mobile · Samsung FlowEPSS 0.19%via NVD
CVE-2026-21133Medium· 5.1Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
▾ SunlitSamsung Mobile · Samsung FlowEPSS 0.14%via NVD
CVE-2026-21131Low· 2.1Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
▾ SunlitSamsung Mobile · Samsung FlowEPSS 0.10%via NVD