SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-53458

MEDIUM · CVSS 5.3 EPSS 0.34% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Blueprint Studio versions prior to 2.5.2 expose raw exception messages through backend API handlers, potentially revealing internal filesystem paths and implementation details to authenticated users. This vulnerability could enable attackers to fingerprint Home Assistant installations, facilitating further targeted attacks. Home Assistant users utilizing Blueprint Studio should prioritize upgrading to version 2.5.2 to mitigate this risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-53458
Severity
MEDIUM
CVSS
5.3
EPSS
0.34%

Original NVD Description

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in custom_components/blueprint_studio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could contain internal filesystem paths or implementation details. The disclosed information could help an authenticated user fingerprint a Home Assistant installation and refine follow-up attacks. This issue is fixed in version 2.5.2.