The Wyoming protocol is a TCP-based protocol used by Home Assistant to carry structured voice-assistant messages between components. It is designed as a machine-to-machine transport, so the data it carries is expected to be parsed and acted on by trusted services.
In security terms, Wyoming matters because it creates a trust boundary. If attacker-controlled input reaches code that builds command-line arguments, paths, or helper-process options, the result can become argument injection rather than a simple parsing error. In a smart-home platform, that may expose local files, secrets such as API tokens, or management functions, and in the worst case help an attacker reach host-level control. Defenses include strict input validation, safe argument handling, allowlisting, and least-privilege execution for any service that consumes Wyoming messages.