Samsung Assistant Vulnerability Allows Local Script Execution

What Happened

A vulnerability, identified as CVE-2026-21032, was found in Samsung Assistant prior to version 9.3.14. This vulnerability is caused by the improper export of Android application components in SmartHomeWidgetReceiver.

Who Is Affected

Users of Samsung Assistant prior to version 9.3.14 are affected by this vulnerability.

Severity & Impact

The vulnerability has a CVSS v4.0 base score of 6.9, indicating a medium severity. The impact is primarily on confidentiality, with a high confidentiality impact.

Mitigation

To mitigate this vulnerability, users should update Samsung Assistant to version 9.3.14 or later.