CVE-2026-53458CWE-209

CVE-2026-53458

published August 19, 2026

CVSS
5.3
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in custom_components/blueprint_studio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could contain internal filesystem paths or implementation details. The disclosed information could help an authenticated user fingerprint a Home Assistant installation and refine follow-up attacks. This issue is fixed in version 2.5.2.

The record
Technical detail
CVSS
5.3 · NONE
CVSS v4.0
5.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00451 · 38.2th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-08-19T01:16Z
References (3)
EPSS history
Timeline
  • 18 AUG 20:47Z
    Blueprint Studio API exposed internal exception details
    cvelistv5