p PatchFirst

CVE-2026-32111

CVE-2026-32111 · ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form (beta feature) accepts a user-supplied ha_url and makes a server-side HTTP request to {ha_url}/api/config with no URL validation. An unauthenticated attacker can submit arbitrary URLs to perform internal network reconnaissance via an error oracle. Two additional code paths in OAuth tool calls (REST and WebSocket) are affected by the same primitive. The primary deployment method (private URL with pre-configured HOMEASSISTANT_TOKEN) is not affected. This vulnerability is fixed in 7.0.0.

CVSS 5.3 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • ha-mcp

    Versions
    • < 7.0.0: Affected

    No fix published

  • ha-mcp PyPI

    Versions
    • 3.3.0
    • 3.3.1
    • 3.3.2
    • 3.4.0
    • 3.4.2
    • 3.4.3
    • 3.5.0
    • 3.5.1
    • 3.6.0
    • 3.6.1
    • 3.6.2
    • 3.7.0
    • 4.0.0
    • 4.0.1
    • 4.1.0
    • 4.10.0
    • 4.11.0
    • 4.11.1
    • 4.11.2
    • 4.11.3
    • 4.11.4
    • 4.11.5
    • 4.11.6
    • 4.11.7
    • 4.11.8
    • 4.11.9
    • 4.12.0
    • 4.13.0
    • 4.14.0
    • 4.14.1
    • 4.14.2
    • 4.15.0
    • 4.15.1
    • 4.16.0
    • 4.16.1
    • 4.16.2
    • 4.17.0
    • 4.17.1
    • 4.18.0
    • 4.18.1
    • 4.18.2
    • 4.19.0
    • 4.2.0
    • 4.20.0
    • 4.21.0
    • 4.22.0
    • 4.22.1
    • 4.3.0
    • 4.4.0
    • 4.5.0
    • 4.6.0
    • 4.7.0
    • 4.7.1
    • 4.7.2
    • 4.7.3
    • 4.7.4
    • 4.7.5
    • 4.7.6
    • 4.7.7
    • 4.8.0
    • 4.8.1
    • 4.8.2
    • 4.8.3
    • 4.8.4
    • 4.8.5
    • 4.9.0
    • 5.0.0
    • 5.0.2
    • 5.0.3
    • 5.0.4
    • 5.0.5
    • 5.0.6
    • 5.1.0
    • 6.0.0
    • 6.1.0
    • 6.2.0
    • 6.3.0
    • 6.3.1
    • 6.4.0
    • 6.5.0
    • 6.6.0
    • 6.6.1
    • 6.7.0
    • 6.7.1
    • 6.7.2
    Affected ranges
    • ECOSYSTEM: < 7.0.0

    Update to 7.0.0

Original sources

Check your server →