A server‑side request forgery flaw in the /auth endpoint of duhow/xiaoai-patch allows a remote attacker to supply an arbitrary URL in the POST parameter, which the software forwards without validation. The resulting HTTP request is made by the smart speaker itself, granting the attacker the ability to access internal network resources or any external web service reachable from the target. The compromise can lead to interrogation of internal services, potential credential leakage, or further lateral movement within the network, as the vulnerability is a classic example of CWE‑918.

The vulnerability affects the duhow/xiaoai-patch software. All released versions that include the /auth endpoint without URL validation are impacted; no specific product or version range was listed.

The CVSS score of 8.6 classifies the issue as High severity, indicating substantial impact if exploited. No EPSS score is available, so the precise exploitation likelihood is uncertain, though the public exposure of the vuln on GitHub suggests attackers may target it. It is not listed in the CISA KEV catalog, implying no confirmed widespread exploitation yet. The likely attack vector requires sending a crafted POST request to the exposed /auth endpoint, which is reachable from the internet, giving remote attackers straightforward access to the SSRF.