This vulnerability (CVE-2026-72581) in duhow/xiaoai-patch is a server-side request forgery (SSRF) issue introduced through commit fb07049. The /auth endpoint in api/main.py accepts a user-supplied url parameter in POST requests and redirects to a Home Assistant instance without validating the destination URL. This lack of validation allows remote attackers to coerce the Xiaomi smart speaker to send HTTP requests to arbitrary URLs, potentially accessing internal network resources or scanning internal services. The vulnerability has a CVSS v3.1 score of 8.6, indicating high severity, with no privileges or user interaction required for exploitation. No known exploits in the wild or vendor patches have been reported as of the publication date.

Successful exploitation allows an unauthenticated remote attacker to make the affected device perform HTTP requests to arbitrary internal or external URLs. This can lead to internal network reconnaissance and unauthorized access to internal services, potentially exposing sensitive information or enabling further attacks within the internal network. The vulnerability does not directly impact confidentiality but can facilitate information disclosure through SSRF. There is no reported impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected device and monitor for unusual network activity. Avoid exposing the vulnerable endpoint to untrusted networks. No vendor advisory or official patch has been published as of the data provided.