The vulnerability resides in the ParseMessage function of the MCP Response Handler in 78 xiaozhi-esp32 versions up to 2.2.6. It allows an attacker to trigger an improper synchronization race condition, which can be exploited remotely. The attack has a high complexity and is known to be difficult, yet an exploit is publicly available. The weakness corresponds to CWE-662.

All installations of 78 xiaozhi-esp32 running versions 2.2.6 or earlier are affected. No specific sub‑versions are listed; the issue applies to the product as released up to the identified cut‑off.

The CVSS score of 2.3 classifies the issue as low severity, and the EPSS score is not available. The public exploit indicates that exploitation is possible, but the high attack complexity and lack of a KEV listing suggest limited real‑world use at present. Monitoring threat intelligence for any change in exploit activity is recommended.