Hubitat vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Hubitat products: 1 record(s), with severity, exploitation and fixes.

Elevation C3 1 Elevation C4 1 Elevation C5 1 Elevation C7 1 Elevation C8 1 Elevation C8 pro 1

Exploited only (KEV) →

CVE-2026-1201 Critical · 9.4 CWE-639 Jan 22, 2026

Authorization Bypass Through User-Controlled Key in Hubitat Elevation Hubs

An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside of their authorized scope via client-side request manipulation.