What is CVE-2026-59717?

CVE-2026-59717 is a medium-severity vulnerability in Home-assistant Core, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 4.3/10. Published 2026-08-07.

How severe is CVE-2026-59717?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Open Redirect in Home-assistant Core

CVE-2026-59717

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The app passes the URL fragment from a homeassistant://invite deep…

Vulnerability class: Open Redirect

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Home-assistant Core — versions < 2026.6.1

Weakness classification (CWE)

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-59717?: CVE-2026-59717 is a medium-severity vulnerability in Home-assistant Core, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 4.3/10. Published 2026-08-07.
How severe is CVE-2026-59717?: Medium severity. CVSS v3 base score is 4.3 out of 10.