{"data":{"id":"141ca668-854b-490f-be02-8429155a9a58","title":"GHSA-pf93-j98v-25pv: ha-mcp has XSS via Unescaped HTML in OAuth Consent Form","summary":"The ha-mcp OAuth consent form renders user-controlled parameters through Python f-strings without HTML escaping, so an attacker who registers a client with a malicious client_name via the /register endpoint can run JavaScript in the server operator's browser after that operator follows a crafted authorization URL. Only the beta OAuth mode (ha-mcp-oauth, requiring MCP_BASE_URL) is affected, not the standard stdio setup. Successful exploitation could exfiltrate data entered into the consent form, including the Home Assistant Long-Lived Access Token.","solution":"Upgrade to 7.0.0","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-pf93-j98v-25pv","publishedAt":"2026-03-12T14:23:44.000Z","cveId":"CVE-2026-32112","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["ha-mcp@< 7.0.0 (fixed: 7.0.0)"],"affectedPackageNames":["ha-mcp"],"affectedPackageRefs":["pypi:ha-mcp"],"affectedVendors":[],"affectedVendorsRaw":["ha-mcp","Claude.ai","ChatGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00192,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-pf93-j98v-25pv"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-03-12T14:23:44.000Z","fixReleasedAt":"2026-03-11T02:40:57.408Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:39:54.838Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"ha-mcp","fixedVersion":"7.0.0","matchedVersion":"7.0.0","fixReleasedAt":"2026-03-11T02:40:57.408Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:39:54.692Z"}]}}