CVE-2026-21133: Path Traversal
Published Oct 12, 2026
·Updated
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
Affected Software
1 affected component
Samsung Samsung Flow<4.9.22.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Flowto a version that resolves this vulnerability.Fixed in 4.9.22.1
Event History
Oct 12, 2026
CVE Published
via MITRE·04:57 AM
Data Sourced
via MITRE·04:57 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
A local attacker can exploit it. The provided data does not indicate that authentication, user interaction, or special privileges are required.
2
What information could be exposed?
Successful exploitation can allow access to clipboard data. The stated impact is limited to confidentiality; no integrity or availability impact is identified.
3
Which Samsung Flow versions are affected?
Samsung Flow versions prior to 4.9.22.1 are affected. Systems running version 4.9.22.1 or later are not identified as affected by the provided advisory.