Hacs

hacs

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Home Assistant Community Store

home_assistant_community_store

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-47942 1Hacs 1Home Assistant Community Store Jun 17, 2026 May 16, 2026 8.7 HIGH· v4 7.5 HIGH· v3 N/A· v2 Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint. Attacker...Show more Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint. Attackers can retrieve the .storage/auth file containing user credentials and refresh tokens, then craft valid JWT tokens to gain administrative access to Home Assistant instances.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-47942

1Hacs

1Home Assistant Community Store

Jun 17, 2026

May 16, 2026

8.7 HIGH· v4

7.5 HIGH· v3

N/A· v2

Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint. Attackers can retrieve the .storage/auth file containing user credentials and refresh tokens, then craft valid JWT tokens to gain administrative access to Home Assistant instances.Show less