PT-2026-24837 · Git+2 · Ha-Mcp+1
Yotampe-Pluto
·
Publicado
2026-03-11
·
Atualizado
2026-03-12
·
CVE-2026-32111
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
ha-mcp versions prior to 7.0.0
Description
ha-mcp is a Home Assistant MCP Server. The ha-mcp OAuth consent form (beta feature) accepts a user-supplied
ha url and makes a server-side HTTP request to {ha url}/api/config without URL validation. An unauthenticated attacker can submit arbitrary URLs to perform internal network reconnaissance via an error oracle. Two additional code paths in OAuth tool calls (REST and WebSocket) are affected by the same issue. The primary deployment method (private URL with pre-configured HOMEASSISTANT TOKEN) is not affected. The issue allows an attacker to map reachable hosts and open ports from the server's network position. The vulnerability is present in the consent form validation, REST tool calls with forged tokens, and WebSocket tool calls with forged tokens. The REST tool calls make HTTP requests to hardcoded HA API paths on the provided host. The WebSocket tool calls attempt to establish WebSocket connections to {ha url}/api/websocket.Recommendations
Upgrade to version 7.0.0.
Exploit
Correção
SSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ha-Mcp
Home Assistant Mcp Server