CVE-2026-72580 in xiaoai-patch
Summary
by MITRE • 08/10/2026
An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directly to os.system() without sanitization, enabling command injection via shell metacharacters.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 08/10/2026
This vulnerability represents a critical operating system command injection flaw in the duhow/xiaoai-patch software component that affects Xiaomi smart speakers. The issue stems from improper input validation and sanitization within the application's API endpoints, specifically targeting the mute and unmute functionality. The vulnerability exists in the api/main.py file where the silent query parameter is directly passed to the os.system() function without any form of input filtering or sanitization. This design flaw allows remote attackers to inject arbitrary shell commands through maliciously crafted query parameters that contain shell metacharacters such as semicolons, pipes, or other command chaining operators.
The technical exploitation of this vulnerability occurs through the manipulation of URL query parameters in the /mute and /unmute endpoints. When a user supplies a malicious value for the silent parameter, the application constructs a system command string by concatenating the user input directly into the os.system() call. This creates an environment where attackers can execute arbitrary operating system commands with the privileges of the running application process. The vulnerability is particularly dangerous because it enables remote code execution without requiring authentication, making it accessible to any attacker who can reach the affected API endpoints. According to CWE-78, this represents a classic command injection weakness where untrusted data flows directly into shell execution functions.
The operational impact of this vulnerability extends beyond simple remote code execution to encompass complete system compromise of affected Xiaomi smart speakers. Attackers could potentially gain persistent access to these devices, install malicious software, exfiltrate sensitive data, or use the compromised devices as entry points for further attacks within connected networks. Smart speakers often serve as gateways to home automation systems and may contain personal voice recordings or other sensitive information. The vulnerability's remote nature means attackers can exploit it from anywhere on the internet without physical access to the devices. This aligns with ATT&CK technique T1059.001 for command and scripting interpreter, specifically targeting the execution of system commands through legitimate system interfaces.
Mitigation strategies should focus on immediate input validation and sanitization measures. The most effective approach involves implementing proper parameter validation where all user-supplied inputs are strictly filtered to remove or escape shell metacharacters before any processing occurs. Additionally, the application should avoid using os.system() with dynamic inputs entirely, instead utilizing safer alternatives such as subprocess module with proper argument handling or direct API calls to system functions. Organizations should also implement network-level firewalls and access controls to restrict exposure of these endpoints to untrusted networks. Regular security audits and penetration testing should be conducted to identify similar vulnerabilities in other components of the smart speaker ecosystem. The remediation process must include comprehensive code review practices that enforce secure coding standards and prevent similar injection vulnerabilities from occurring in future development cycles.