---
id: "CVE-2026-116017"
kind: "vulnerability"
aliases: ["CVE-2026-116017"]
title: "Xiaozhi-esp32-server: authenticated users can read other users' device address books"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "esp32", "manager-api", "self-hosted", "xiaozhi-esp32-server"]
not_affected_if: ["auth-required", "managed-hosting"]
published_at: "2026-10-24T12:16:58+00:00"
first_seen_at: "2026-10-24T12:47:58+00:00"
updated_at: "2026-10-25T04:18:44+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116017", "first_seen_at": "2026-10-24T12:47:58+00:00"}]
---

# Xiaozhi-esp32-server: authenticated users can read other users' device address books

Xiaozhi-esp32-server before 0.9.8 has an insecure direct object reference in the manager-api DeviceController.getAddressBook handler. A logged-in user can request another user's device MAC address and read that device's contacts, aliases, call permissions and owner user IDs.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the deployed version of Xiaozhi-esp32-server; anything below `0.9.8` is in scope.
- Confirm whether `/device/address-book/{macAddress}` is reachable by ordinary registered accounts.

## Fix

- Upgrade Xiaozhi-esp32-server to `0.9.8` or later.
- Until upgraded, restrict the manager-api to trusted users only.

## Timeline

- 2026-10-24T12:47:58+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116017

## From the sources

Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceController.getAddressBook handler that allows authenticated users to read other users' device address books. Attackers with a normal or self-registered account can request /device/address-book/{macAddress} with another user's device MAC to obtain contact MACs, aliases, call permissions, and owner user IDs.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_