Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jninja2 templates instead of a sandboxed one. The user-supplied input within Jinja2 templates was rendered locally with no restrictions. This gave users access to Python's internals and extended the scope of templating beyond the intended usage. This vulnerability is fixed in 1.0.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-40602 The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used … https://www.cve.org/CVERecord?id=CVE-2026-40602
Post summary
The text discloses CVE‑2026‑40602, noting an unrestricted environment in hass‑cli versions up to 1.0.0, without mentioning a PoC, exploit, or patch.
🚨*CVE* CVE-2026-40602 The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used … https://www.cve.org/CVERecord?id=CVE-2026-40602 ----- Traducción: CVE-2026-40602 La … http://infoflow.cloud`
Post summary
CVE-2026-40602 for Home Assistant's hass-cli has been publicly disclosed with minimal details; no PoC, exploit, or patch information is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | home-assistant-ecosystem | home_assistant_command-line_interface | - | - | - |