CVE-2022-28775: Samsung Flow

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permission.

Affected products

• Samsung Samsung Flow: before 4.8.06.5 (fixed in 4.8.06.5)

Published 2022-04-11. Last modified 2026-06-17.