CVE-2026-32112

ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form renders user-controlled parameters via Python f-strings with no HTML escaping. An attacker who can reach the OAuth endpoint and convince the server operator to follow a crafted authorization URL could execute JavaScript in the operator's browser. This affects only users running the beta OAuth mode (ha-mcp-oauth), which is not part of the standard setup and requires explicit configuration. This vulnerability is fixed in 7.0.0.

• CWE-79

• https://github.com/homeassistant-ai/ha-mcp/security/advisories/GHSA-pf93-j98v-25pvVendor Advisory

Published

Mar 11, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32107xrdp is an open source RDP server. In versions through 0.10.…8.8
• CVE-2026-32108Copyparty is a portable file server. Prior to 1.20.12, there…6.5
• CVE-2026-32109Copyparty is a portable file server. Prior to 1.20.12, if an…4.4
• CVE-2026-3211Cross-Site Request Forgery (CSRF) vulnerability in Drupal Th…4.3
• CVE-2026-32110SiYuan is a personal knowledge management system. Prior to 3…8.3
• CVE-2026-32111ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the h…5.3
• CVE-2026-32113Discourse is an open-source discussion platform. From versio…6.1
• CVE-2026-32114Discourse is an open-source discussion platform. Prior to ve…4.3
• CVE-2026-32116Magic Wormhole makes it possible to get arbitrary-sized file…8.1
• CVE-2026-32117The grafanacubism-panel plugin allows use of cubism.js in Gr…5.4
• CVE-2026-32118OpenEMR is a free and open source electronic health records …9
• CVE-2026-32119OpenEMR is a free and open source electronic health records …4.4