Home Assistant’s Supervisor closes a route for installed apps to make privileged system changes, such as adding an app repository. An app allowed to use the Home Assistant connection could wrap a prohibited command inside a batch and have it forwarded with Core’s more privileged identity.
Mike Degatano makes Supervisor inspect each command and reject the whole batch if any command is prohibited or cannot be verified. Batches containing only allowed commands continue to work. Stefan Agner reviewed the correction.