Homeassistant-ai vulnerabilities

Products

• Ha-mcp 2
• Home Assistant Mcp Server 2

Newest

• homeassistant-ai ha-mcp, home assistant mcp server +1 more ha-mcp has XSS via Unescaped HTML in OAuth Consent Form CVE-2026-32112 Fix available 6.8 MediumMarch 11, 2026
• homeassistant-ai ha-mcp, home assistant mcp server +1 more ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle CVE-2026-32111 Fix available 5.3 MediumMarch 11, 2026