Advisories · Technology

Home Assistant Companion app (iOS).

Every CVE that names Home Assistant Companion app (iOS) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-44698 CVE record

CVSS 8.3 High

Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injection
- home-assistant core
- Home Assistant Companion app (iOS)
- Code injection
- CWE-346
Not analysed yet 29 May 2026