# Samsung MagicINFO 9 Server default permissions flaw allows local privilege escalation

- Date: 2026-04-10
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2026-25203
- Products: [MagicINFO](https://signagelist.org/products/magicinfo/)

NVD published a local privilege escalation flaw in Samsung MagicINFO Server. It comes from incorrect default permissions in MagicINFO 9 Server, which is affected below version 21.1091.1.

## Sources

- [CVE-2026-25203](https://nvd.nist.gov/vuln/detail/CVE-2026-25203) (NIST NVD)
- [https://security.samsungtv.com/securityUpdates](https://security.samsungtv.com/securityUpdates)

Page: https://signagelist.org/incidents/2026-04-samsung-magicinfo-9-server-default-permissions-flaw/