Homeassistant-Ai

2 CVEs across 2 Homeassistant-Ai products. Browse Homeassistant-Ai vulnerabilities, severities, and proof-of-concept exploits.

Homeassistant-Ai products with known CVEs

ProductCVEs
Ha-Mcp2
Home Assistant Mcp Server2
Homeassistant-Ai CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32112Medium6.82026-03-11ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form renders user-controlled parameters via Python f-strings with no HTML escap…
CVE-2026-32111Medium5.32026-03-11ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form (beta feature) accepts a user-supplied ha_url and makes a server-side HTTP…