CVE-2026-53457
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
Blueprint Studio before version 2.5.2 in the legacy stateless terminal command execution path accepts a cwd working-directory parameter and checks only whether the directory exists, without requiring it to remain inside the Home Assistant configuration directory. An administrator using the restricted terminal helper could select an existing directory outside the intended configuration boundary. Commands could then access or modify host paths permitted by the Home Assistant container and filesystem permissions, weakening the helper's expected filesystem restriction.
Risk Assessment
An administrator may accidentally or intentionally execute commands outside the configuration directory, potentially leading to unauthorized access or modification of system files.
Recommendation
Upgrade Blueprint Studio to version 2.5.2 or later, which includes the fix.
Original NVD description (English source)
Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy stateless terminal command execution path in custom_components/blueprint_studio/backend/terminal_manager.py accepted a cwd working-directory parameter and checked only whether the directory existed, without requiring it to remain inside the Home Assistant configuration directory. An administrator using the restricted terminal helper could select an existing directory outside the intended configuration boundary. Commands could then access or modify host paths permitted by the Home Assistant container and filesystem permissions, weakening the helper's expected filesystem restriction. This issue is fixed in version 2.5.2.