Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2025.5.0, The iOS companion app ignores the SSID allowlist for internal networks. The app uses SSID to detect when to use the internal URL, but whenever the app cannot find any other URL to be used, it fallbacks to the internal URL as well, which can expose user's token when connected to a not secure network. This vulnerability is fixed in 2025.5.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-29 | 2 | Disclosure2 |
| 2026-06-30 | 1 | Patch1 |
🚨 HIGH severity CVE-2026-55844 (CVSS 7.5): Home Assistant iOS app bypasses SSID allowlist, exposing user tokens on untrusted networks. Update to v2025.5.0 immediately. #CVE #Vulnerability #PatchNow https://t.co/nlSLnmEqtx
Post summary
The tweet announces a high‑severity CVE–2026‑55844 affecting Home Assistant iOS, explains the technical flaw, and urges users to patch to v2025.5.0.
🚨*CVE* CVE-2026-55844 Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2025.5.0, The iOS companion app ignores the SSID allowlist … https://www.cve.org/CVERecord?id=CVE-2026-55844 ----- Traducción: CVE-2026-55844 Hom… http://infoflow.cloud`
Post summary
The post references CVE-2026‑55844, noting that the iOS companion app prior to version 2025.5.0 ignores the SSID allowlist.
CVE-2026-55844 Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2025.5.0, The iOS companion app ignores the SSID allowlist … https://www.cve.org/CVERecord?id=CVE-2026-55844
Post summary
The text discloses a Slack issue where the Home Assistant iOS app ignores the SSID allowlist, with the 2025.5.0 update likely providing a fix.