Home Assistant mDNS Server-Side Request Forgery

Home Assistant Green is vulnerable to Server-Side Request Forgery (SSRF) via the mDNS/Zeroconf IPP integration, allowing unauthenticated attackers on the local network to trick it into making HTTP requests to arbitrary hosts including internal services. The IPP integration automatically processes mDNS service announcements without authentication and follows HTTP redirects from attacker-controlled hosts.

Disclosed 22 September 2026 · Record updated 1 October 2026

Impact

Unauthenticated attackers on the local network can perform Server-Side Request Forgery attacks against internal services

Our coverage

A small green machine sits in a living room while shadowy hands manipulate its internal circuits through a hidden backdoor, forcing it to send secret messages to locked rooms behind its own walls.

Vulnerabilities

Home Assistant Green flaw lets local attackers force internal requests

A GitHub advisory published on 22 September 2026 says the smart-home hub's printer discovery feature can be abused to reach internal services.

22 Sept 2026

Sources

github.comhttps://github.com/advisories/GHSA-4ghv-53cq-7wp3