External risk intelligence

Xiaomi Smart Speaker OS Command Injection via Mute Endpoint.

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2026-72580

The vulnerability exists in an API endpoint on a smart speaker. Such devices frequently expose management or control interfaces over the network, and the lack of authentication combined with an accessible API makes this type of interface commonly reachable in typical smart home deployment patterns.

OS Command Injection

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical vulnerability has been identified in the software powering Xiaomi smart speakers, specifically within a patch for the XiaoAi voice assistant. This flaw could allow an unauthorized remote attacker to execute any system command, potentially leading to a complete compromise of the affected devices. The main concern at this stage is confirming whether our organization utilizes this specific software and, if so, to what extent it is deployed.

A command injection flaw exists.
It impacts Xiaomi smart speakers.
Confirm relevance and assess exposure.

Attack Path

How an attacker could exploit the issue

An attacker can exploit this vulnerability by sending specially crafted network requests to a Xiaomi smart speaker. By targeting specific API endpoints that handle mute and unmute commands, and providing malicious input in the 'silent' query parameter, an attacker can trick the device into executing arbitrary system commands. This could allow an attacker to take control of the device or access sensitive information.

Network access required.
Malicious input sent to API endpoint.
Arbitrary command execution.

Live Threat

Current exploitation, exposure, and threat context

A remote attacker could execute arbitrary system commands on Xiaomi smart speakers by sending specially crafted requests to the /mute and /unmute API endpoints. This could occur when the device is accessible over a network and these endpoints are not properly secured.

System commands on the smart speaker.
Through unauthenticated network requests to API endpoints.
May lead to unauthorized control or data access.

Operational Fix

Recommended remediation, mitigation, and detection steps

This critical vulnerability in Xiaomi smart speaker firmware allows unauthenticated remote attackers to execute arbitrary system commands. The primary action is to identify all affected devices, assess their network exposure, and determine business criticality to prioritize remediation efforts with the relevant product or platform teams.

Identify affected smart speaker devices.
Verify network reachability and business criticality.
Plan remediation with the product owner.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the duhow/xiaoai-patch software?

This software is a third-party modification or patch created for Xiaomi smart speakers to extend or alter the functionality of the XiaoAi voice assistant. Users typically install such patches to enable custom features, improved integrations, or deeper control over the speaker's built-in software environment.

What does CVE-2026-72580 mean?

This vulnerability is an OS command injection, classified as CWE-78. It means the application fails to filter malicious input before passing it to the device's operating system. Because the software treats user-provided text as a command to be executed, an attacker can input shell metacharacters to run their own unauthorized system instructions.

How does an attacker trigger this vulnerability?

An attacker triggers this by sending a network request to the /mute or /unmute API endpoints on an affected device. They inject harmful commands into the 'silent' query parameter. Requests that do not target these specific endpoints or that do not contain shell-altering characters will not trigger this specific command injection flaw.

Is my device at risk for CVE-2026-72580?

Halo Surface Signal indicates that smart speakers often expose management APIs directly to the local network without authentication. If your device runs this patch and is reachable over your network, it is potentially at risk. You should prioritize checking devices that are not isolated behind restricted network segments.

Do I need to update my Xiaomi smart speakers?

First, verify if you are running the duhow/xiaoai-patch, as this flaw is specific to that third-party code. If you are using it, document which systems are affected and their network reachability. Coordinate with your technical team to disable or remove the patch until a secure update is provided by the developers.

References

github.com/duhow/xiaoai-patch

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.