CVE-2026-32112
Medium
Description
ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form renders user-controlled parameters via Python f-strings with no HTML escaping. An attacker who can reach the OAuth endpoint and convince the server operator to follow a crafted authorization URL could execute JavaScript in the operator's browser. This affects only users running the beta OAuth mode (ha-mcp-oauth), which is not part of the standard setup and requires explicit configuration. This vulnerability is fixed in 7.0.0.
SeverityMedium
CVSS6.8
Exploit probability—
ProductHomeassistant-ai Home Assistant Mcp Server
PublishedMar 11, 2026
First seenMar 11, 2026
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- homeassistant-ai home_assistant_mcp_server7.0.0 or later
- ha-mcp7.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| homeassistant-ai home_assistant_mcp_server | v < 7.0.0 | 7.0.0 |
| ha-mcpPyPI | v < 7.0.0 | 7.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.