CVE-2026-32111mediumCWE-918

CVE-2026-32111: fallo de gravedad media en homeassistant-ai ha-mcp

ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear ha-mcp+ Monitorear ha-mcp

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.3%
ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form (beta feature) accepts a user-supplied ha_url and makes a server-side HTTP request to {ha_url}/api/config with no URL validation. An unauthenticated attacker can submit arbitrary URLs to perform internal network reconnaissance via an error oracle. Two additional code paths in OAuth tool calls (REST and WebSocket) are affected by the same primitive. The primary deployment method (private URL with pre-configured HOMEASSISTANT_TOKEN) is not affected. This vulnerability is fixed in 7.0.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
homeassistant-ai · ha-mcp
CVEs relacionadas — homeassistant-ai ha-mcp

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-32112MEDIUMha-mcp has XSS via Unescaped HTML in OAuth Consent FormEPSS 0.2%