This vulnerability affects the 78 xiaozhi-esp32 product up to version 2.2.6 in the Application::GetInstance function of the MQTT Goodbye Handler component (file main/protocols/mqtt_protocol.cc). By manipulating the session_id argument remotely, an attacker can cause a denial of service condition. The attack requires high complexity and no privileges or user interaction, with no confidentiality, integrity, or availability impact beyond denial of service. A patch is available as identified by commit e182471f8c5a22434346bd98da34d3b66c8c8b3e, though no official vendor advisory or remediation level is provided in the data.

Successful exploitation results in denial of service, causing the affected application to become unavailable or crash. There is no indication of data confidentiality or integrity compromise. The vulnerability can be exploited remotely without authentication, but requires high attack complexity. Public exploit code exists, increasing the risk of exploitation despite the difficulty.

A patch identified by commit e182471f8c5a22434346bd98da34d3b66c8c8b3e is recommended to remediate this vulnerability. Since no official vendor advisory or remediation level is provided, users should apply this patch promptly to affected versions 2.2.0 through 2.2.6. Until patched, limiting exposure of the affected service to untrusted networks may reduce risk.