PT-2026-69134

Name of the Vulnerable Software and Affected Versions Home Assistant Android Companion app versions prior to 2026.6.1 Description The Android Companion app contains an open redirect issue where the application processes the URL fragment from a homeassistant://invite deep link during the onboardin...

CVE-2026-59717: URL Redirection to Untrusted Site

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.6.1, the Android Companion app is vulnerable to an open redirect. The app passes the URL fragment from a homeassistant://invite deep link into the onboarding flow without ever displaying the...