An OS command injection flaw exists in the /mute and /unmute endpoints of the duhow/xiaoai-patch project. The handler for these endpoints passes a user–supplied silent query parameter directly to os.system() without any sanitization. Consequently, a remote attacker can inject shell metacharacters and execute arbitrary system commands on the device. This breach would grant full control of the Xiaomi smart speaker, allowing an attacker to exfiltrate data, install malware, or use the device as a foothold for further attacks.

The vulnerability affects installations of the duhow/xiaoai-patch firmware on Xiaomi smart speakers. No specific version information is listed; any instance that includes the vulnerable /mute and /unmute handlers is at risk.

The CVSS score of 9.8 reflects the severity of this remote code execution. Because the flaw is exposed through a publicly accessible API, the likelihood of exploitation is high, although the EPSS score is not provided. The vulnerability is not currently listed in the CISA KEV catalog, but the lack of a mitigation from the vendor heightens the risk. An attacker only needs network access to the device’s API service to exploit the flaw, making it immediately actionable from a distance.