THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-53454 — Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .g

[NVD] CVE-2026-53454 — Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .g

mednvdPublished 2026-08-18

CVE-2026-53454 CVSS: None Published: 2026-08-18T21:16:35.133

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials file for the user running Home Assistant.

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-53454cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-53454