Skip to main content
ZDI-26-562 MEDIUM 5.4 Published Aug 12, 2026

Home Assistant Green mDNS Server-Side Request Forgery Vulnerability

Home

This vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests on affected installations of Home Assistant Green. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4.

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy