Product

go2rtc

0 mentions in 7 days · 0 in 30 days · 2 total · first seen Aug 12, 2026 · last Aug 12, 2026

Timeline2 articles

ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

ZDI disclosed a Pwn2Own command injection flaw (CVSS 7.5) in Home Assistant Green's go2rtc, enabling network-adjacent attackers to execute arbitrary code via localhost access.

The Zero Day Initiative published ZDI-26-561 for a command injection remote code execution flaw in go2rtc on Home Assistant Green, demonstrated at Pwn2Own. Network-adjacent attackers can execute arbitrary code after first gaining access to the device's localhost interface. ZDI rated the issue CVSS 7.5.

ZDI Published AdvisoriesAug 12, 05:00 UTC · Aug 12, 2026Advisory

ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

ZDI disclosed another Pwn2Own command injection flaw (CVSS 7.5) in Home Assistant Green's go2rtc, enabling network-adjacent code execution after obtaining localhost access.

The Zero Day Initiative published ZDI-26-560 for a second command injection remote code execution flaw in go2rtc on Home Assistant Green, demonstrated at Pwn2Own. Network-adjacent attackers can execute arbitrary code after first obtaining access to the device's localhost interface. ZDI rated the issue CVSS 7.5.

ZDI Published AdvisoriesAug 12, 05:00 UTC · Aug 12, 2026Advisory

Appears with

organization Zero Day Initiative 2 product Home Assistant Green 2 vendor Home Assistant 2 vendor Zero Day Initiative 2

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.