CVE-2025-65713
Published
CVSS v3
4
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal. The Downloader integration does not fully validate file paths during concatenation, leaving a path traversal vulnerability.
:house_with_garden: Open source home automation that puts local control and privacy first.
GitHub