ZDI-26-896: (Pwn2Own) Home Assistant Green Cleartext Storage of Credentials Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Home Assistant Green. An attacker must first obtain the ability to execute low-privileged code within a container on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-91131.
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Affected Home Assistant Green installations are exposed only after an attacker can execute low-privileged code inside a container on the target system. This is therefore primarily a local post-compromise privilege-escalation risk rather than an unauthenticated remote entry point.
What does an attacker need before exploitation is possible?
The attacker must first obtain the ability to run low-privileged code within a container on the affected system. The provided information does not identify another prerequisite or attack vector for gaining that initial container-level execution.