This vulnerability (CVE-2026-72580) in duhow's xiaoai-patch involves improper neutralization of special elements used in OS commands (CWE-78). Specifically, the /mute and /unmute endpoint handlers in api/main.py directly pass the user-controlled 'silent' parameter to os.system(), enabling remote command injection. This flaw allows an unauthenticated remote attacker to execute arbitrary system commands on affected Xiaomi smart speakers. The vulnerability was introduced in commit fb07049. No patch or remediation information is currently available.

Successful exploitation allows remote attackers to execute arbitrary system commands on the affected devices, potentially leading to full system compromise, data loss, or disruption of device functionality. The vulnerability requires no privileges or user interaction and can be exploited remotely over the network, making it highly impactful.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid exposing the vulnerable endpoints to untrusted networks or implement network-level controls to restrict access. Monitoring for unusual command execution on affected devices is also advisable.