Home Assistant HACS - Local File Inclusion
CVE-2021-3152
Verified
Description
Home Assistant before 2021.1.3 lacks a protection layer against directory-traversal attacks in custom integrations, letting attackers access arbitrary files, exploit requires attacker to deploy malicious custom integration.
Severity
High
CVSS Score
7.5
Exploit Probability
2%
Affected Product
integration
Published Date
April 22, 2026
Template Author
dhiyaneshdk
CVE-2021-3152.yaml
7.5Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE ID:
cve-2021-3152
CWE ID:
cwe-22
Remediation Steps
Update to version 2021.1.3 or later to include protection against directory traversal in custom integrations.