Skip to main content

xiaozhi-esp32 EUVDEUVD-2026-39989

| CVE-2026-13489 LOW
Improper Synchronization (CWE-662)
2026-06-28 VulDB GHSA-2vm4-w283-mr2p
Information Disclosure Xiaozhi Esp32
1.3
CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY
1.3 LOW
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
4.2 MEDIUM

AV:N for WebSocket access; AC:H for concurrent-client requirement; PR:L for initial connection; C:L added because broadcast inherently discloses cross-client MCP responses.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

3
CVSS changed
Jun 28, 2026 - 12:22 NVD
2.3 (LOW) 1.3 (LOW)
Source Code Evidence Fetched
Jun 28, 2026 - 11:52 vuln.today
Analysis Generated
Jun 28, 2026 - 11:52 vuln.today

DescriptionCVE.org

A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of the file main/mcp_server.cc of the component MCP Response Handler. This manipulation causes improper synchronization. Remote exploitation of the attack is possible. The attack's complexity is rated as high. The exploitation is known to be difficult. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.

AnalysisAI

Improper response routing in xiaozhi-esp32 firmware up to version 2.2.6 allows any authenticated WebSocket client to receive MCP (Model Context Protocol) responses intended for other connected clients, enabling cross-client information disclosure and low-integrity interference. The flaw resides in the ParseMessage function within main/mcp_server.cc, where the MCP Response Handler broadcasts responses globally to all connected WebSocket clients on port 8080 rather than routing replies back to the originating client. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Gain local WiFi or LAN access
Delivery
Establish WebSocket session to port 8080
Exploit
Await concurrent victim client MCP request
Execution
Receive globally broadcast MCP response
Impact
Extract cross-client payload data
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires: (1) the device runs xiaozhi-esp32 firmware version 2.2.6 or earlier compiled with a board configuration that includes WebSocketControlServer, such as the otto-robot variant; (2) the attacker has already established a WebSocket connection to port 8080 - network-level access to the device and the ability to complete the WebSocket handshake are prerequisites, making purely unauthenticated internet-originated attacks unlikely given typical local-WiFi deployments; (3) at least one concurrent victim client session must be active and issuing MCP requests at the same time as the attacker's session. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Real-world risk is low, consistent with the CVSS 4.0 base score of 2.3. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with access to the same local WiFi network as an affected xiaozhi-esp32 device connects to the WebSocket control server on port 8080 simultaneously with a legitimate user who is issuing MCP commands. Due to the unpatched global broadcast behavior in ParseMessage, the attacker's WebSocket session receives the MCP response intended for the legitimate user, potentially exposing AI interaction results or voice command outputs. …
Remediation An upstream fix is available as GitHub pull request #2021 (https://github.com/78/xiaozhi-esp32/pull/2021), which replaces the global broadcast mechanism with targeted per-client response delivery; however, this PR was pending acceptance at time of analysis, and no released patched version number has been independently confirmed. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Xiaozhi Esp32

View all
CVE-2026-13491 LOW POC
2.9 Jun 28

Denial-of-service in xiaozhi-esp32 MQTT firmware (versions up to 2.2.6) allows a remote attacker to crash the device's M

Same weakness CWE-662 – Improper Synchronization

View all
CVE-2020-12769 MEDIUM POC
5.5
CVE-2024-32644 CRITICAL
9.1
CVE-2016-8368 HIGH
8.6
CVE-2019-15031 MEDIUM POC
4.4
CVE-2019-5675 HIGH
7.8
CVE-2024-7409 HIGH
7.5
CVE-2021-20592 HIGH
7.5
CVE-2019-16137 HIGH
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

EUVD-2026-39989 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy