Govee2MQTT breaks with mosquito 7.0

[cryptonym64]

Describe the issue you are experiencing

7.0 is denying Govee2MQTT

What type of installation are you running?

Home Assistant OS

Which operating system are you running on?

Home Assistant Operating System

Which app are you reporting an issue with?

Mosquitto broker

What is the version of the app?

7.0.0

Steps to reproduce the issue

Install 7.0
Govee2MQTT light strip goes unavailable
Deny messages found in app log

System Health information

System Information

version	core-2026.4.2
installation_type	Home Assistant OS
dev	false
hassio	true
docker	true
container_arch	amd64
user	root
virtualenv	false
python_version	3.14.2
os_name	Linux
os_version	6.12.77-haos
arch	x86_64
timezone	America/New_York
config_dir	/config

Home Assistant Community Store

GitHub API	ok
GitHub Content	ok
GitHub Web	ok
HACS Data	ok
GitHub API Calls Remaining	5000
Installed Version	2.0.5
Stage	running
Available Repositories	2932
Downloaded Repositories	27

Home Assistant Cloud

logged_in	true
subscription_expiration	January 29, 2027 at 7:00 PM
relayer_connected	true
relayer_region	us-east-1
remote_enabled	false
remote_connected	false
alexa_enabled	false
google_enabled	true
cloud_ice_servers_enabled	true
remote_server	us-east-1-12.ui.nabu.casa
certificate_status	ready
instance_id	57c1b4166bfb44ff9c61143dfbea4c80
can_reach_cert_server	ok
can_reach_cloud_auth	ok
can_reach_cloud	ok

Home Assistant Supervisor

host_os	Home Assistant OS 17.2
update_channel	stable
supervisor_version	supervisor-2026.04.0
agent_version	1.8.1
docker_version	29.3.1
disk_total	97.7 GB
disk_used	35.4 GB
nameservers	192.168.90.1
healthy	true
supported	true
host_connectivity	true
supervisor_connectivity	true
ntp_synchronized	true
virtualization	kvm
board	ova
supervisor_api	ok
version_api	ok
installed_addons	Z-Wave JS UI (7.2.0), ESPHome Device Builder (2026.3.3), Matter Server (8.4.0), Cloudflared (7.0.5), Home Assistant Google Drive Backup (0.112.1), Studio Code Server (6.0.1), Speech-to-Phrase (1.4.3), Samba share (12.6.1), Govee to MQTT Bridge (2026.03.25-ab9deb66), Mosquitto broker (6.5.2), Assist Microphone (1.3.0), openWakeWord (2.1.0), Whisper (3.1.0), File editor (6.0.0), Nginx Proxy Manager (2.1.0), Piper (2.2.2), SQLite Web (6.0.1), Terminal & SSH (10.1.0)

Dashboards

dashboards	5
resources	20
views	2
mode	storage

Network Configuration

adapters	lo (disabled), enp0s18 (enabled, default, auto), docker0 (disabled), hassio (disabled), veth06c1c95 (disabled), vethc77248c (disabled), veth084ff81 (disabled), veth39ccc69 (disabled), veth413960b (disabled), vethe22de7e (disabled), veth0262ba8 (disabled), vethe819018 (disabled), vethf976282 (disabled), veth444d6e3 (disabled), veth34846d4 (disabled), veth888ddde (disabled), veth5bade3f (disabled), veth9c84974 (disabled), veth4691b71 (disabled), veth2f8c1e0 (disabled), veth5a2668c (disabled), veth1fb9be0 (disabled)
ipv4_addresses	lo (127.0.0.1/8), enp0s18 (192.168.90.100/24), docker0 (172.30.232.1/23), hassio (172.30.32.1/23), veth06c1c95 (), vethc77248c (), veth084ff81 (), veth39ccc69 (), veth413960b (), vethe22de7e (), veth0262ba8 (), vethe819018 (), vethf976282 (), veth444d6e3 (), veth34846d4 (), veth888ddde (), veth5bade3f (), veth9c84974 (), veth4691b71 (), veth2f8c1e0 (), veth5a2668c (), veth1fb9be0 ()
ipv6_addresses	lo (::1/128), enp0s18 (fe80::2663:38c2:25c1:fc4c/64), docker0 (fe80::fc4e:8ff:fe67:d22f/64), hassio (fd0c:ac1e:2100::1/48, fe80::a0d6:29ff:fef3:b954/64), veth06c1c95 (fe80::bcaa:d7ff:fec3:b390/64), vethc77248c (fe80::7cce:14ff:fe8d:2912/64), veth084ff81 (fe80::ec15:3cff:fe37:79da/64), veth39ccc69 (fe80::fcf6:29ff:fea1:588/64), veth413960b (fe80::602a:81ff:fe7e:b7d/64), vethe22de7e (fe80::4ce4:ceff:fe88:bc0f/64), veth0262ba8 (fe80::64f5:fcff:fedf:2f9b/64), vethe819018 (fe80::c11:62ff:fea9:fb4/64), vethf976282 (fe80::64c7:a7ff:fed7:c3ff/64), veth444d6e3 (fe80::9064:7cff:fe5f:77c4/64), veth34846d4 (fe80::a861:11ff:feed:6711/64), veth888ddde (fe80::9810:8eff:fec6:ea06/64), veth5bade3f (fe80::18e1:5ff:fed5:322/64), veth9c84974 (fe80::c8c9:6cff:fe18:378/64), veth4691b71 (fe80::e8a3:eeff:fe3c:7177/64), veth2f8c1e0 (fe80::64f0:f6ff:fe76:ead6/64), veth5a2668c (fe80::48ae:6eff:fe9e:6d30/64), veth1fb9be0 (fe80::c0f9:70ff:fe72:ab17/64)
announce_addresses	192.168.90.100, fe80::2663:38c2:25c1:fc4c

Recorder

oldest_recorder_run	March 24, 2026 at 3:33 PM
current_recorder_run	April 14, 2026 at 2:08 PM
estimated_db_size	435.81 MiB
database_engine	sqlite
database_version	3.49.2

Anything in the Supervisor logs that might be useful for us?

Anything in the app logs that might be useful for us?

[17:23:09] INFO: Successfully send discovery information to Home Assistant.
[17:23:09] INFO: Successfully send service information to the Supervisor.
2026-04-14 17:23:09: New connection from 172.30.32.1:47690 on port 1883.
2026-04-14 17:23:09: New client connected from 172.30.32.1:47690 as govee2mqtt/0980fed4c8f34889ac5543c2a15a51f7 (p4, c1, k120, u'addons').
2026-04-14 17:23:10: ACL denying access to client with dangerous client id "govee2mqtt/0980fed4c8f34889ac5543c2a15a51f7"

Additional information

Reverted to old version and it all works fine.

[manuveli]

can confirm, same issue here, had to revert from a backup to version 6.5.2

[knuti1960]

Same here, back to 6.5.2 and everything works again

[CommanderROR9]

Yes, same here. I was wondering why my lights suddenly stopped. No idea why this is happening though...

[peterhoe]

Out of interest, if you use nabu casa, did your connection to nabu casa also break as a result of the upgrade of mosquito broker to version 7

[CommanderROR9]

I pay for the subscription, but don't actually use nabucasa. So I can't really tell you. Sorry.

[manuveli]

delivered a fix for this, I hope it gets approved asap: #4565

[sbesh91]

@manuveli your pr is listed as a draft. Can you mark it ready for review? I'm experiencing this bug.

[cryptonym64]

I only use nabu for Google and backup and to support development

[neponn]

I had this problem as well, but I am reasonably confident my client names do not have a / in them - I remember weeding them out recently. I do, however, have - and _ characters. Might these also be rejected by the auth_plugin_deny_special_chars parameter?

[jensenvance]

Any ETA?

[steverpalmer-cmd]

Same issue

[manuveli]

@sbesh91 just did, my PR ist now Ready for Review and will hopefully be merged soon: #4565

[djbassmind-sketch]

Wann wird es ein ersatz Update geben ???? kann doch nicht sein das nach jedem Update hier irgend etwas nicht mehr Funktioniert