https://www.theregister.co.uk/2018/10/31/google_home_api/

A security researcher says an undocumented API is responsible for a vulnerability that can crash the Google Home Hub assistant.

Flaw finder Jerry Gamblin says the security hole allows the device to receive curl commands that can, among other things, reboot the unit or even cause it to disconnect from the wireless network, necessitating a manual reconfiguration.