CVE-2026-66061

CVE-2026-66061 affects the Home Assistant project via its iOS Companion app. The root cause is that, prior to version 2026.5.0, tag links (NFC or QR) delivered through OS-level routing (e.g., iOS universal links) could be treated as if physically scanned without validating the calling app or prom...