CVE-2026-32111CWE-918

ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle

Medium · published March 11, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

ha-mcp is a Home Assistant MCP Server. Prior to 7.0.0, the ha-mcp OAuth consent form (beta feature) accepts a user-supplied ha_url and makes a server-side HTTP request to {ha_url}/api/config with no URL validation. An unauthenticated attacker can submit arbitrary URLs to perform internal network reconnaissance via an error oracle. Two additional code paths in OAuth tool calls (REST and WebSocket) are affected by the same primitive. The primary deployment method (private URL with pre-configured HOMEASSISTANT_TOKEN) is not affected. This vulnerability is fixed in 7.0.0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00354 · 27.9th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-03-11T20:41Z
EPSS history
Timeline
  • 11 MAR 20:41Z
    ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
    cvelistv5