What’s Vulnerable › Products

home-assistant Home Assistant Companion vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your home-assistant Home Assistant Companion version is affected

Latest home-assistant Home Assistant Companion vulnerabilities

• CVE-2026-54318 — Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location (CVSS 7.1)
• CVE-2023-44385 — Client-Side Request Forgery in Home Assistant iOS/macOS native Apps (CVSS 8.8)
• CVE-2023-41898 — Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Android (CVSS 7.8)