Live › vulnerability › CVE-2026-111623
Go to dashboardXiaozhi-esp32-server-java through 6.1.0 returns valid device WebSocket tokens to anyone who requests /api/device/ota with any MAC address, with no authentication. An attacker can then connect to a victim device's channel to read its private system prompts, write conversation history, use the LLM, speech-to-text and text-to-speech credentials, and overwrite device metadata.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any self-hosted Xiaozhi-esp32-server-java instance at version 6.1.0 or earlier that is reachable from a network the attacker can reach, since the OTA endpoint needs no authentication. Teams that run only the ESP32 device firmware against a managed backend, or that keep the server behind a VPN with no outside access, are much less exposed.
No product ranges from the sources yet.
6.1.0 or earlier./api/device/ota from outside the network with an arbitrary MAC address and see whether a WebSocket token comes back without login.6.1.0 (the fixed version is unknown from the sources)./api/device/ota at the reverse proxy or firewall, and rotate the LLM, STT and TTS API keys stored in the server.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role system prompts, write conversation history, consume LLM/STT/TTS credentials, and overwrite device metadata.
This page as .md · .json · in your agent: get_signal("CVE-2026-111623")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.