CVE-2026-53456 Blueprint Studio terminal SSH private key written to disk
An attacker with filesystem access can read residual SSH private keys written to disk by Blueprint Studio, potentially compromising SSH authentication.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-53456?
CVE-2026-53456 is a medium-severity vulnerability in ha-china blueprint-studio, published on 18 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in custom_components/blueprint_studio/backend/terminal_manager.py wrote SSH private-key material to a file under the Home Assistant configuration directory before applying restrictive permissions and relied on best-effort cleanup. The key could temporarily remain on disk and could persist if cleanup failed or Home Assistant crashed. A user or process with filesystem access to the Home Assistant configuration directory could obtain the residual private key. This issue is fixed in version 2.5.2.
Weakness: CWE-522
Which versions are affected by CVE-2026-53456?
How do I fix CVE-2026-53456?
No fix has been published for CVE-2026-53456 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-53456 being exploited?
There is no known exploitation of CVE-2026-53456 in the wild and no public exploit code.
Sources
Also known as GHSA-3vg8-xf27-7q45.