{"action":"Upgrade esphome to 2024.2.1 or later.","affected":[{"fixed":"2024.2.1","introduced":"2023.12.9"}],"component":"esphome","cve_ids":["CVE-2024-27081"],"ecosystem":"PyPI","epss":0.01535,"exploited":false,"fixed_versions":["2024.2.1"],"ghsa_id":"GHSA-8p25-3q46-8q2p","id":"tcs_01M5KGRY09AWSG3QSEF32BYB93","modified_at":"2026-07-07T17:46:44.640680657Z","published_at":"2026-07-07T11:45:34.104926Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1328","https://github.com/esphome/esphome/security/advisories/GHSA-8p25-3q46-8q2p","https://nvd.nist.gov/vuln/detail/CVE-2024-27081","https://github.com/esphome/esphome/commit/d814ed1d4adc71fde47c4df41215bee449884513","https://github.com/esphome/esphome","https://pypi.org/project/esphome","https://github.com/advisories/GHSA-8p25-3q46-8q2p"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"PYSEC-2026-1328","url":"https://osv.dev/vulnerability/PYSEC-2026-1328"}],"summary":"ESPHome vulnerable to remote code execution via arbitrary file write"}