CyberSecBulletin

Ha-china vulnerabilities

We track 2 vulnerabilities in Ha-china products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2026.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest Ha-china vulnerabilities

  • 8.6 High severity

    blueprint-studio: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-53455Ha-china

    Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in custom_components/blueprint_studio/backend/git_manager.py by interpolating the configured G

  • 8.7 High severity

    blueprint-studio: Missing Authorization

    CVE-2026-53453Ha-china

    Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any authenticated Home Assistant user because the backend did not consistently enforce