IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-12-23 17:15

MODIFIED

2025-12-23 17:15

EPSS (Prob. Exploit)

0.40%

Top 66.4%

DATA SOURCES:

NVD 🔗 2025-12-23 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-04

> DESCRIPTION

Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal. The Downloader integration does not fully validate file paths during concatenation, leaving a path traversal vulnerability.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-pp3g-xmm4-5cw9 MODERATE

Home Assistant Core before is vulnerable to Directory Traversal

AFFECTED PACKAGES:

PIP / homeassistant

< 2025.8.0

Fixed in: 2025.8.0

> HISTORIQUE DES MODIFICATIONS

Première apparition

23/12/2025 17:15

Source: NVD

📊 ENRICHISSEMENT 19/01/2026 17:38

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui

Total des modifications: 1 Dernière mise à jour: 9 months ago

> REFERENCES

https://gist.github.com/GenoWang/7359360285e0fe21a7a58d10ff71d032