CVE-2026-111623

29th percentile - higher than 29% of all known CVEs

Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role system prompts, write conversation history, consume LLM/STT/TTS credentials, and overwrite device metadata.

Device communication channel takeover — leakage of private prompts, conversation history manipulation, consumption of paid LLM/STT/TTS resources, and metadata spoofing. Can lead to financial abuse and user privacy violations.

Upgrade Xiaozhi-esp32-server-java beyond 6.1.0 once available and implement MAC address verification and authentication in the /api/device/ota endpoint. Until a fix is released, consider restricting access to this endpoint.