This vulnerability involves improper access control (CWE-284) in the Link to Windows feature on Samsung Mobile Devices before the SMR Sep-2026 Release 1. It permits local attackers to connect to a PC without requiring proper user interaction, potentially bypassing intended security controls. The CVSS 4.0 vector indicates the attack requires local access with low complexity, no privileges, no user interaction, and results in high impact on availability. No vendor advisory or patch information is currently available.

Local attackers can establish unauthorized connections between the affected Samsung Mobile Devices and PCs without user consent or interaction. This could lead to unauthorized access or control over the linked PC environment, impacting system availability. The CVSS score of 6.9 reflects a medium severity impact primarily due to the high impact on availability and the lack of required privileges or user interaction for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with local access to devices and monitor for suspicious activity related to Link to Windows connections.