Blueprint Studio, a VS Code-like editor for Home Assistant, had a legacy terminal command execution path that accepted a working-directory parameter. The code only verified that the supplied directory existed but did not enforce that it resided within the Home Assistant configuration tree. An administrator using the restricted terminal helper could choose a directory outside the intended boundary, enabling commands to read or modify files on the host that the container and filesystem permissions allowed. This weakness, a classic path traversal error (CWE-22), weakens the helper’s file-system isolation and permits unauthorized access to host data.

The vulnerability affects the ha-china blueprint-studio component for all releases prior to version 2.5.2. Specifically, any installation using component versions 2.5.1 or earlier is susceptible. The patch resolving the issue was released in the 2.5.2 release. Current users should verify they are on at least that version to remove the flaw.

With a CVSS base score of 5.1, the weakness is considered a moderate risk. The EPSS score is less than 1%, indicating a very low exploitation probability, and the vulnerability is not listed in CISA’s KEV catalog. The primary attack vector is local: an authenticated administrator who can invoke the restricted terminal helper can supply a non-config path, causing the helper to execute commands with that working directory. When the container runs with elevated privileges, the attacker may gain read or write access to host files, undermining confidentiality and integrity. Mitigation depends on applying the patch or ensuring the container runs with minimal privileges.