homeassistant-mcp-server

The `ha_execute_python` endpoint allows executing arbitrary Python code using `exec()`. While `safe_globals` attempts to sandbox the environment by providing access only to specified libraries (pandas, numpy, matplotlib, json, datetime, re), `exec()` is an extremely high-risk function. A sophisticated attacker or an LLM with unexpected behavior could potentially bypass the sandbox or leverage vulnerabilities in the exposed libraries to gain unauthorized access or execute arbitrary commands on the host system. This is a critical vulnerability if the endpoint is not perfectly secured and the sandbox is not rigorously tested against advanced exploits. Direct file write operations are also present (`ha_write_file`).