Threats tagged 'ghsa-g79m-4gpq-p8x3'

xiaozhi-esp32-server-java versions up to 6.1.0 contain an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting the /api/device/ota endpoint with any MAC address. This enables attackers to open a victim device's WebSocket channel to read private system prompts, write conversation history, consume credentials, and overwrite device metadata.