PT-2026-24837 · Git+2 · Ha-Mcp+1
Yotampe-Pluto
·
Published
2026-03-11
·
Updated
2026-03-12
·
CVE-2026-32111
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
ha-mcp versions prior to 7.0.0
Description
ha-mcp is a Home Assistant MCP Server. The ha-mcp OAuth consent form (beta feature) accepts a user-supplied
ha url and makes a server-side HTTP request to {ha url}/api/config without URL validation. An unauthenticated attacker can submit arbitrary URLs to perform internal network reconnaissance via an error oracle. Two additional code paths in OAuth tool calls (REST and WebSocket) are affected by the same issue. The primary deployment method (private URL with pre-configured HOMEASSISTANT TOKEN) is not affected. The issue allows an attacker to map reachable hosts and open ports from the server's network position. The vulnerability is present in the consent form validation, REST tool calls with forged tokens, and WebSocket tool calls with forged tokens. The REST tool calls make HTTP requests to hardcoded HA API paths on the provided host. The WebSocket tool calls attempt to establish WebSocket connections to {ha url}/api/websocket.Recommendations
Upgrade to version 7.0.0.
Exploit
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ha-Mcp
Home Assistant Mcp Server