Threats tagged 'ghsa-wv6h-fhj6-j53g'

xiaozhi-esp32-server versions up to 0.9.8 have an authentication bypass vulnerability in the WebSocketServer._handle_auth function. This flaw allows remote attackers to bypass Bearer HMAC token verification by spoofing the Device-ID header with an allowlisted MAC-address-shaped identifier. Exploitation enables opening an authenticated WebSocket session, issuing voice-assistant commands, exchanging audio, and accessing the conversation context of the spoofed device.