Product by Home-Assistant
Home Assistant Companion
3 known vulnerabilities in Home Assistant Companion (Home-Assistant), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-54318 | Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location | 7.1 | |
| High | CVE-2023-44385 | Client-Side Request Forgery in Home Assistant iOS/macOS native Apps | 8.6 | |
| High | CVE-2023-41898 | Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Android | 8.6 |