Vulnerability · Published Jul 21, 2026 · Assigned by VulnCheck
CVE-2026-64824Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore
High 8.4
In plain English
A high-severity path traversal in Home Assistant Core from home-assistant. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted tar archive with a SYMTYPE entry containing a benign member name paired with an absolute linkname pointing outside the extraction directory. Because the official Docker image runs the Home Assistant process as root and the subsequent regular-file entry is written through the unvalidated symlink, attackers can achieve remote code execution by overwriting auto-imported Python paths such as site-packages/sitecustomize.py or custom component directories.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | praisonai | 4.6.40 | GHSA-78r8-wwqv-r299 |
| PyPI | praisonai | 4.6.40 | PYSEC-2026-2905 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| home-assistant | Home Assistant Core | 0 – before 2026.7.0 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
References
- Release Notes release-notes
- Pull Request issue-tracking
- Patch Commit patch
- https://www.vulncheck.com/advisories/home-assistant-core-symlink-path-traversal-rce-via-backup-restore third-party-advisory
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-78r8-wwqv-r299 exploit