Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/09 11:51 p.m.9 views

ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

Summary On the Home Assistant add-on, the dashboard serves a trusted ingress site that skips authentication because the supervisor authenticates the request upstream. That site was binding 0.0.0.0. The add-on runs in host network mode for mDNS, so binding all interfaces also bound the host's LAN...

SaveExploits0References4Affected Software1
Rows per page
Query Builder