CVE-2026-72581: duhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint
A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests to arbitrary internal or external URLs. The /auth endpoint in api/main.py uses the user-supplied url POST parameter to redirect to a Home Assistant instance without validating the destination URL, enabling internal network scanning and access to internal services.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
duhow/xiaoai-patchto a version that resolves this vulnerability.Patch fb07049 - Configuration
In the /auth endpoint, stop using the user-supplied url POST parameter for redirection to the Home Assistant instance unless the destination URL is validated/allowlisted; do not redirect to arbitrary internal/external URLs.
api/main.py (/auth endpoint) URL validation for user-supplied POST parameter = Enable destination URL validation / block redirects to unvalidated destinations
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72581?
The severity of CVE-2026-72581 is rated high with a score of 8.6.
What is the description of CVE-2026-72581?
CVE-2026-72581 is a server-side request forgery (SSRF) vulnerability that allows a remote attacker to make HTTP requests through the /auth endpoint.
How can I fix CVE-2026-72581?
To fix CVE-2026-72581, ensure proper validation and sanitization of input for the user-supplied url parameter.
Who can be affected by CVE-2026-72581?
Any users of the duhow/xiaoai-patch, particularly those using the affected /auth endpoint, can be affected by CVE-2026-72581.
When was CVE-2026-72581 published?
CVE-2026-72581 was published on August 10, 2026.