The duhow/xiaoai-patch project contains an OS command injection vulnerability (CVE-2026-72580) introduced through commit fb07049. The vulnerability is located in the /mute and /unmute endpoint handlers in api/main.py, where the user-supplied 'silent' query parameter is passed directly to os.system() without proper sanitization. This allows a remote attacker to inject shell metacharacters and execute arbitrary system commands on Xiaomi smart speakers running the affected patch. The vulnerability has a CVSS 3.1 base score of 9.8, indicating critical impact with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows remote attackers to execute arbitrary system commands on affected Xiaomi smart speakers, potentially leading to full system compromise including unauthorized control, data theft, or service disruption. The vulnerability is critical due to its ease of exploitation and high impact on system security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing the vulnerable endpoints to untrusted networks or implement network-level access controls to restrict access. Monitor vendor channels for updates and apply patches promptly once released.