Priority HIGH 66
Home Assistant is open source home automation software that puts local control and privacy first.
CVSS 3.1HIGH 7.6· Adjacent network · No auth · No interaction · EPSS 0.00308 · Published 2026-06-23 · Fixed in 2026.6.0 CWE-200
Priority HIGH 67
Home Assistant is open source home automation software that puts local control and privacy first.
CVSS 4.0HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00209 · Published 2026-03-27 · Fixed in 2026.01 CWE-79
Priority HIGH 67
Home Assistant is open source home automation software that puts local control and privacy first.
CVSS 4.0HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00231 · Published 2026-03-27 · Fixed in 2026.01 CWE-79
Priority MEDIUM 52
Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00405 · Published 2025-12-23 · Fixed in 2025.8.0 CWE-22
Priority LOW 22
Home Assistant is open source home automation software.
CVSS 3.1MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.00908 · Published 2023-12-15 · Fixed in 2023.12.3 CWE-200
Priority LOW 25
Home assistant is an open source home automation.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00452 · Published 2023-10-19 · Fixed in 2023.9.0 CWE-200
Priority LOW 25
Home assistant is an open source home automation.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00505 · Published 2023-10-19 · Fixed in 2023.9.0 CWE-669
Priority MEDIUM 44
Home assistant is an open source home automation.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00712 · Published 2023-10-19 · Fixed in 2023.9.0 CWE-79
Priority MEDIUM 41
Home assistant is an open source home automation.
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.00315 · Published 2023-10-19 · No fix listed CWE-345
Priority MEDIUM 45
Home assistant is an open source home automation.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01079 · Published 2023-10-19 · Fixed in 2023.9.0 CWE-1021
Priority LOW 34
Home assistant is an open source home automation.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0056 · Published 2023-10-19 · Fixed in 2023.9.0 CWE-918
Priority CRITICAL 87
homeassistant is an open source home automation tool.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.72167 · Published 2023-03-08 · Fixed in 2023.3.2, 2023.03.3 CWE-287
Priority LOW 38
An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02897 · Published 2022-03-07 · No fix listed CWE-203
Priority LOW 28
Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02159 · Published 2021-01-21 · No fix listed CWE-22
Priority LOW 36
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01739 · Published 2019-09-23 · Fixed in 0.67.0 CWE-200
Priority LOW 29
In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00772 · Published 2017-11-10 · No fix listed CWE-79
THREATIST.IORead the docs