CVE-2026-72580
CriticalCVSS 9.8Summary
An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directly to os.system() without sanitization, enabling command injection via shell metacharacters.
Risk Assessment
An attacker can take control of the smart speaker, execute arbitrary commands, potentially leading to privacy breaches, espionage, and use of the device for further attacks on the network.
Recommendation
Update xiaoai-patch to a patched version or apply a workaround such as sanitizing the silent parameter and avoiding os.system() on user input.
Original NVD description (English source)
An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directly to os.system() without sanitization, enabling command injection via shell metacharacters.