Authorization Bypass Vulnerability in Samsung KnoxGuardManager
CVE-2026-20978

5.8MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
4 February 2026

What is CVE-2026-20978?

The Samsung KnoxGuardManager is susceptible to an authorization bypass due to improper authorization handling prior to the SMR Feb-2026 Release 1. This vulnerability enables local attackers to bypass critical persistence configurations within the application, potentially leading to unauthorized access or manipulation of sensitive data. It is essential for users of KnoxGuardManager to ensure they are on the latest release to mitigate this risk.

Affected Version(s)

Samsung Mobile Devices SMR Feb-2026 Release in Android 13, 14, 15

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V4

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.