CVE-2026-66060

CVE-2026-66060 affects Home Assistant, where the Companion app accepts NFC/QR tag links via an OS-level routing mechanism and processes them as if physically scanned without validating the calling app or prompting the user. The root cause is unverified local calls delivering arbitrary tags to Hom...