Vulnerabilities

TI-2026-39213 CVE-2026-54318

Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location

MEDIUM 64

Home Assistant is open source home automation software that puts local control and privacy first.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00168 Published 2026-06-23 Fixed in 2026.5.3 CWE-926

TI-2023-22290 CVE-2023-41898

LOW 38

Home assistant is an open source home automation.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00178 Published 2023-10-19 Fixed in 2023.9.2 CWE-345

TI-2023-23891 CVE-2023-44385

MEDIUM 40

The Home Assistant Companion for iOS and macOS app up to version 2023.4 are vulnerable to Client-Side Request Forgery.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00307 Published 2023-10-19 Fixed in 2023.7 CWE-352