Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
home-assistant/core
dev @ c8b1733
147
Fixes
16
CVEs
CRITICAL
Peak severity
38.7%
Coverage
Highlights
Auth Bypass: 60 prior fixes. Scrutinize any change in this area.
homeassistant/components/http.py: most-fixed (6 issues). Treat as high-risk during review.
60 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The trusted networks authentication provider is highly susceptible to source IP spoofing if X-Forwarded-For headers are trusted from unconfigured or arbitrary proxies. Safe validation requires explicitly checking remote addresses against a trusted proxy configuration block.
Auth Bypass: Services registered within the core system can inadvertently expose platform actions to unauthorized control. This happens when handlers fail to validate context permissions or when targeting mechanisms fallback to executing commands across all registered entities when target identifiers are missing.
Path Traversal: Integration endpoints passing parameters directly to supervisor REST APIs are vulnerable to path traversal if structural components, such as add-on slugs, do not undergo strict character validation. Attackers can leverage directory traversal via modified slugs to invoke arbitrary supervisor endpoints.