The vulnerability is a path traversal flaw in Samsung Mobile Smart Switch that lets an attacker who physically controls the device read arbitrary files with Smart Switch privileges. This can reveal sensitive local data, configuration files, or backup contents, potentially exposing personal or corporate information without authentication.

Samsung Mobile Smart Switch versions prior to 3.7.73 are affected. Users running these versions on their devices are at risk until the application is updated to a non‑vulnerable release.

With a CVSS score of 5.1, the flaw is of moderate severity. The EPSS score is unavailable, and the vulnerability is not listed in CISA's KEV catalog, indicating lower prioritization. The attack vector is inferred as a local, physical attacker who has control of the device; no remote exploitation has been documented. As the flaw permits reading of files within the Smart Switch privilege scope, the impact is limited to data confidentiality for the device owner.