Advisories · Technology
ha-china blueprint-studio.
Every CVE that names ha-china blueprint-studio among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Blueprint Studio terminal command working directory not bounded to config directory
- ha-china blueprint-studio
- Path traversal
- CVSS 5.6 Medium
Blueprint Studio terminal SSH private key written to disk
- ha-china blueprint-studio
- Hard-coded credentials
- CVSS 8.6 High
Blueprint Studio Git credential helper command injection
- ha-china blueprint-studio
- Command injection
- CVSS 6.9 Medium
Blueprint Studio stored Git credentials in plaintext Git credential store
- ha-china blueprint-studio
- Hard-coded credentials
- CVSS 8.7 High
Blueprint Studio API authorization bypass for non-admin Home Assistant users
- ha-china blueprint-studio
- Broken access control
- CVSS 5.3 Medium
Blueprint Studio API exposed internal exception details
- ha-china blueprint-studio
- Information disclosure