Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
homeassistant-ai/ha-mcp
master @ 1914f03
44
Fixes
0
CVEs
HIGH
Peak severity
38.2%
Coverage
Highlights
Auth Bypass: 12 prior fixes. Scrutinize any change in this area.
custom_components/ha_mcp_tools: most-fixed (5 issues). Treat as high-risk during review.
23 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Lexical path validation failures historically allowed directory traversal and symlink escape out of the Home Assistant configuration directory. Ensuring absolute path resolution prior to containment checks remains a critical invariant.
Auth Bypass: Shared global WebSocket client connections previously allowed cross-client OAuth credential leakage and access bypasses, highlighting the necessity of cryptographically hashed, isolated connection pools per identity.
Auth Bypass: Lack of cryptographic signatures on stateless OAuth tokens permitted client-side forgery and privilege escalation until HMAC-SHA256 verification was introduced.