The vulnerability CVE-2026-72580 affects the duhow xiaoai-patch project used in Xiaomi smart speakers. Specifically, the /mute and /unmute endpoint handlers in api/main.py take the user-supplied 'silent' query parameter and pass it directly to the os.system() function without any sanitization or validation. This improper neutralization of special elements in OS commands (CWE-78) enables remote attackers to inject shell metacharacters and execute arbitrary system commands on the affected device. The vulnerability was introduced through commit fb07049. The CVSS 3.1 score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No known exploits in the wild or vendor patches have been reported as of the publication date.

Successful exploitation allows remote attackers to execute arbitrary system commands on Xiaomi smart speakers running the vulnerable duhow xiaoai-patch software. This can lead to full compromise of the device, including unauthorized access, data manipulation, and denial of service. The vulnerability has a critical CVSS score of 9.8, reflecting its high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid exposing the vulnerable endpoints to untrusted networks. Implementing input validation or sanitization on the 'silent' parameter before passing it to system commands is recommended once a patch is available.