ha-china

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ha-china records in CISA KEV

No ha-china vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2026-38536 CVE-2026-53455

Blueprint Studio Git credential helper command injection

MEDIUM 40

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00501 Published 2026-08-18 Fixed in 2.5.2 CWE-78

TI-2026-38534 CVE-2026-53453

Blueprint Studio API authorization bypass for non-admin Home Assistant users

MEDIUM 40

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0045 Published 2026-08-18 Fixed in 2.5.2 CWE-862

TI-2026-38535 CVE-2026-53454

Blueprint Studio stored Git credentials in plaintext Git credential store

LOW 31

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00458 Published 2026-08-18 Fixed in 2.5.2 CWE-522

TI-2026-38538 CVE-2026-53457

Blueprint Studio terminal command working directory not bounded to config directory

LOW 25

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00756 Published 2026-08-18 Fixed in 2.5.2 CWE-22

TI-2026-38537 CVE-2026-53456

Blueprint Studio terminal SSH private key written to disk

LOW 25

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.

CVSS 4.0MEDIUM 5.6 Local High privileges No interaction EPSS 0.00209 Published 2026-08-18 Fixed in 2.5.2 CWE-522

TI-2026-38539 CVE-2026-53458

Blueprint Studio API exposed internal exception details

LOW 24

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00451 Published 2026-08-18 Fixed in 2.5.2 CWE-209

Open these records in search →