VendorsHomeassistant-aihome_assistant_mcp_serverany version
Vulnerabilities

Homeassistant-ai Home Assistant MCP Server any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-32112
ha-mcp has XSS via Unescaped HTML in OAuth Consent Form
Published 2026-03-11 · Analyzed
6.8EPSS 0.002
CVE-2026-32111
ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
Published 2026-03-11 · Analyzed
5.3EPSS 0.003