---
id: CVE-2026-53457
title: >-
  Blueprint Studio is a VS Code-like file editor for Home Assistant
  configuration files
summary: >-
  Blueprint Studio is a VS Code-like file editor for Home Assistant
  configuration files. Prior to 2.5.2, the legacy stateless terminal command
  execution path in
  custom_components/blueprint_studio/backend/terminal_manager.py accepted a cwd
  …
severity: none
cwe:
  - CWE-22
published: '2026-08-18'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T21:02:26.047'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53457'
references:
  - url: >-
      https://github.com/ha-china/blueprint-studio/commit/943aed0be67f3a910b0f70a3864288d5e17e55ce
    label: security-advisories@github.com
  - url: 'https://github.com/ha-china/blueprint-studio/releases/tag/v2.5.2'
    label: security-advisories@github.com
  - url: >-
      https://github.com/ha-china/blueprint-studio/security/advisories/GHSA-5cc6-r4rr-fpfh
    label: security-advisories@github.com
tags:
  - nvd
epss: 0.00756
epssPercentile: 0.53164
ingestedAt: '2026-09-08T21:11:12.283Z'
---

## Overview

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, the legacy stateless terminal command execution path in custom_components/blueprint_studio/backend/terminal_manager.py accepted a cwd working-directory parameter and checked only whether the directory existed, without requiring it to remain inside the Home Assistant configuration directory. An administrator using the restricted terminal helper could select an existing directory outside the intended configuration boundary. Commands could then access or modify host paths permitted by the Home Assistant container and filesystem permissions, weakening the helper's expected filesystem restriction. This issue is fixed in version 2.5.2.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.