A significant security vulnerability in the Home Assistant Community Store (HACS) creates a high risk of unauthorized system interaction.

The vulnerability relates to the HACS component within Home Assistant, potentially allowing an attacker to leverage the integration to perform unauthorized actions on the host system.

With a CVSS score of 7.5, this vulnerability poses a high risk to home and enterprise automation environments. Successful exploitation could grant an attacker unauthorized control over connected devices or access to sensitive configuration data, resulting in a loss of security and privacy.

Immediate Action: Verify the current version of HACS installed and apply security updates provided by the official Home Assistant repository or HACS maintainers immediately.

Proactive Monitoring: Monitor the Home Assistant logs for unexpected integration behavior or unauthorized configuration changes.

Compensating Controls: Restrict access to the Home Assistant dashboard via network-level controls, such as VPNs or firewalls, to minimize the attack surface.

Public Exploit Available: false

The severity of this vulnerability necessitates immediate attention for all HACS users. Administrators should prioritize updating the integration to the latest version and ensure that access controls are strictly enforced to limit exposure.