CVE-2022-28543: Samsung Flow

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission.

Affected products

• Samsung Samsung Flow: before 4.8.07.4 (fixed in 4.8.07.4)

Published 2022-04-11. Last modified 2026-06-17.