Home Assistant Core vulnerabilities
2 known vulnerabilities in Home Assistant Core from Home-assistant. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest first
- 9.3 Critical severity
Home Assistant Core: Improper Limitation of a Pathname to a Restricted Directory
Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafted backup archive during the initial onboarding window. Attac
- 8.4 High severity
Home Assistant Core: Improper Limitation of a Pathname to a Restricted Directory
Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted tar archive with a SYMTYPE entry containing a benign m