Description
Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Bixby | — | — |
High · 7.2
CVE-2026-21074
EUVD-2026-55099GHSA-2xcm-9h5p-f5jp
Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.
Published Aug 10, 2026 · Updated Aug 11, 2026 · Assigned by SamsungMobile