Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form (beta feature) accepts a user-supplied ha_url and makes a server-side HTTP request to {ha_url}/api/config with no URL validation. An unauthenticated attacker can submit arbitrary URLs to perform internal network reconnaissance via an error oracle. Two additional code paths in OAuth tool calls (REST and WebSocket) are affected by the same primitive. The primary deployment method (private URL with pre-configured HOMEASSISTANT_TOKEN) is not affected. This vulnerability is fixed in 7.0.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 ha-mcp OAuth beta, Server-Side Request Forgery (SSRF), #CVE-2026-32111 (Medium) https://dailycve.com/ha-mcp-oauth-beta-server-side-request-forgery-ssrf-cve-2026-32111-medium/
Post summary
A new SSRF vulnerability (CVE-2026-32111) has been disclosed in ha-mcp OAuth beta with a medium severity rating.
CVE-2026-32111 ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form (beta feature) accepts a user-supplied ha_url and makes a server-side HTTP reques… https://www.cve.org/CVERecord?id=CVE-2026-32111
Post summary
The post discloses technical details of CVE-2026-32111, describing a server‑side request forgery in Home Assistant MCP before version 7.0.0, but provides no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | homeassistant-ai | home_assistant_mcp_server | - | - | - |