Skip to content
Threat Feed
Subscribe

Product

Esphome-Device-Builder (< 1.0.10)

1 brief RSS
high advisory

Unauthenticated Access to ESPHome Dashboard via Ingress Interface Misconfiguration

An auth bypass in the ESPHome Home Assistant add-on allows unauthenticated LAN access to the dashboard due to improper interface binding, enabling remote code execution on the host.

esphome-device-builder auth-bypass remote-code-execution home-assistant esphome
2t