Skip to content
OpenAdvisories

Vendor

home-assistant

28 known vulnerabilities.

Products

core 23 Home Assistant Core 3 supervisor 1 Companion app (iOS) 1 Companion app (Android) 1 Home Assistant Operating System 1 Home Assistant Supervisor 1 Home Assistant Community Store (HACS) 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2026-64824 Public exploit

    Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore

    Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted tar archive with a SYMTYPE entry containing a benign …

    home-assistant Home Assistant Core
  • High 8.6
    CVE-2023-41898 Public exploit

    Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Android

    Home assistant is an open source home automation. The Home Assistant Companion for Android app up to version 2023.8.2 is vulnerable to arbitrary URL loading in a WebView. This enables all sorts of attacks, including arbitrary JavaScript execution, limited nat…

    home-assistant core