CVE-2026-21137: Path Traversal
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Smart Switchto a version that resolves this vulnerability.Fixed in 3.7.73
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems running Samsung Smart Switch versions earlier than 3.7.73 are exposed when an attacker has physical access to the system.
What level of access does an attacker need to exploit it?
The issue requires physical access. No prior privileges or user interaction are required according to the supplied CVSS vector.
What could an attacker gain through successful exploitation?
An attacker could access files using Smart Switch privileges. The reported impact is integrity-focused; no confidentiality or availability impact is specified.
How can I determine whether I am affected?
Check the installed Samsung Smart Switch version. Versions prior to 3.7.73 are affected.