The vulnerability identified as CVE-2026-21082 affects Samsung Health versions before 7.0.0. It is a relative path traversal flaw that permits local attackers to access sensitive information by exploiting improper validation of file paths. The CVSS 4.0 vector indicates local attack vector with low complexity and no privileges required, but the overall impact is moderate. There is no vendor advisory or patch information available in the provided data, and no known active exploitation has been reported.

Local attackers can leverage this vulnerability to access sensitive information stored by Samsung Health by traversing directories via relative path manipulation. This could lead to unauthorized disclosure of personal health data or other sensitive files accessible by the application. The impact is limited to local attackers and does not involve remote exploitation or privilege escalation according to the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to devices running affected versions of Samsung Health and monitor for suspicious local activity. Avoid granting unnecessary local access to untrusted users.