CVE-2026-53457

Received Received - Intake

Path Traversal in Blueprint Studio for Home Assistant

Publication date: 2026-08-18

Last updated on: 2026-08-19

Assigner: GitHub, Inc.

Description

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy stateless terminal command execution path in custom_components/blueprint_studio/backend/terminal_manager.py accepted a cwd working-directory parameter and checked only whether the directory existed, without requiring it to remain inside the Home Assistant configuration directory. An administrator using the restricted terminal helper could select an existing directory outside the intended configuration boundary. Commands could then access or modify host paths permitted by the Home Assistant container and filesystem permissions, weakening the helper's expected filesystem restriction. This issue is fixed in version 2.5.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-19

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-53457

Affected Vendors & Products

Vendor	Product	Version / Range
blueprint_studio	blueprint_studio	2.5.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability affects Blueprint Studio, a VS Code-like editor for Home Assistant configuration files. Before version 2.5.2, a terminal command execution path did not properly restrict the working directory to the Home Assistant configuration directory. An administrator could select an existing directory outside this boundary, allowing commands to access or modify host paths permitted by container and filesystem permissions. This weakens the intended filesystem restrictions of the terminal helper.

Detection Guidance

Check Blueprint Studio version with: pip show blueprint_studio. If version is below 2.5.2, the system is vulnerable. Inspect terminal_manager.py for improper cwd parameter handling in custom_components/blueprint_studio/backend/

Impact Analysis

If you use Blueprint Studio versions prior to 2.5.2, an attacker with administrative access could exploit this to run commands outside the intended configuration directory. This may lead to unauthorized access or modification of sensitive host files, depending on container and filesystem permissions.

Compliance Impact

This vulnerability could potentially violate compliance requirements by allowing unauthorized access to sensitive data or system files. If exploited, it may lead to data breaches or unauthorized modifications, which could conflict with GDPR's data protection principles or HIPAA's security rules for protected health information.

Mitigation Strategies

Upgrade Blueprint Studio to version 2.5.2 or later immediately. Review and restrict terminal helper permissions in Home Assistant configuration. Monitor filesystem access logs for suspicious activity outside the configuration directory.

Hi! I’m here to help you understand CVE-2026-53457. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70