PT-2026-42987

Summary When ENABLE YAML CONFIG EDITING=true, every ha config set yaml call backs up the pre-edit file to /www/yaml backups/, which Home Assistant serves at /local/ with no authentication. Anyone who can reach the HA web interface can download the most recent pre-edit configuration.yaml or other...