Homey releases critical security update for smart home devices

Homey, the Dutch-Korean smart home company owned by Athom (a subsidiary of LG), has released firmware version 13.4.1 to address a critical security vulnerability. The update is applicable to the Homey Pro, the Homey Pro mini, and self-hosted server software.

The vulnerability was reported by an external security researcher through a coordinated disclosure process. While the company stated there is currently no evidence that the flaw has been exploited in the wild, the lack of specific technical details—such as a CVE number or a severity score—has drawn scrutiny. Users are advised to update immediately via the Homey app settings or through their respective platform instructions for self-hosted hardware.

In addition to the security patch, the update resolves issues regarding Z-Wave connections to older devices and certain errors within the Matter protocol.