PatchTheCVECVE-2023-50715: Home Assistant is open source home automation software
CVE-2023-50715 is a medium-severity flaw (CVSS 4.3) affecting home-assistant. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Home Assistant is open source home automation software. Prior to version 2023.12.3, the login page discloses all active user accounts to any unauthenticated browsing request originating on the Local Area Network. Version 2023.12.3 contains a patch for this issue. When starting the Home Assistant 2023.12 release, the login page returns all currently active user accounts to browsing requests from the Local Area Network. Tests showed that this occu
Why this priority
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 4.3 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.9% (top 40%) |
| CISA exploited list | No |
| Weakness | CWE-200 |
| Published | 2023-12-15 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-50715?
home-assistant: upgrade to 2023.12.3. Exact commands for each OS are on this page.
Is CVE-2023-50715 being exploited?
CVE-2023-50715 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-50715 affect?
CVE-2023-50715 affects home-assistant. Severity is medium (CVSS 4.3). Home Assistant is open source home automation software. Prior to version 2023.12.3, the login page discloses all active user accounts to any unauthenticated browsing request originating on the Local Area Network. Version 2023.12.3 contains
How urgent is CVE-2023-50715?
Priority 35/100. Public exploit reference
Software pages
Home Assistant vulnerabilities
Related CVEs
- CVE-2026-33044 MEDIUM 5.4 UPGRADE Home Assistant is open source home automation software that puts local control and privacy first
- CVE-2025-65713 MEDIUM 4.0 UPGRADE Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal
- CVE-2026-33045 MEDIUM 5.4 UPGRADE Home Assistant is open source home automation software that puts local control and privacy first
- CVE-2026-54317 HIGH 7.6 UPGRADE Home Assistant is open source home automation software that puts local control and privacy first
- CVE-2023-41899 MEDIUM 6.6 UPGRADE Home assistant is an open source home automation