-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| homeassistant | pip | < 0.67.0 | 0.67.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from the insecure registration of the error log endpoint in api.py. The pre-patch code (vulnerable versions) used register_static_path with no authentication, while the fix introduced an authenticated view (APIErrorLog). The setup function's conditional block (if log_path:) directly enabled the insecure endpoint, making it the root cause. The commit diff and CWE-200 context confirm this was an authentication bypass issue.