CVE-2026-111623 Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance
Unauthenticated attackers can obtain valid device tokens to read prompts, modify history, and consume AI credentials on Xiaozhi-esp32-server-java.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-111623?
CVE-2026-111623 is a medium-severity authentication bypass vulnerability in joey-zhou xiaozhi-esp32-server-java, published on 16 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address. Attackers can open a victim device's WebSocket channel to read private role system prompts, write conversation history, consume LLM/STT/TTS credentials, and overwrite device metadata.
Weakness: CWE-290
Which versions are affected by CVE-2026-111623?
How do I fix CVE-2026-111623?
No fix has been published for CVE-2026-111623 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-111623 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-111623 exists.
Sources
Also known as GHSA-g79m-4gpq-p8x3.