A remote OS command injection vulnerability in the jishi node-sonos-http-api TTS provider poses a significant risk as it allows unauthenticated attackers to execute arbitrary commands.

This flaw exists within the Promise function in lib/tts-providers/mac-os.js, where improper neutralization of input allows for OS command injection. The vulnerability is remotely exploitable by an unauthenticated attacker.

The ability for an unauthenticated remote attacker to inject and execute arbitrary OS commands represents a critical security failure, potentially leading to a full system compromise. Given the CVSS score of 7.3, this vulnerability carries a high risk of unauthorized access, lateral movement within the network, and potential data exfiltration.

Immediate Action: As no official patch is currently available, administrators should restrict network access to the affected API and disable the TTS provider functionality to prevent exploitation.

Proactive Monitoring: Monitor server logs for suspicious shell-related commands or unusual process spawning originating from the node-sonos-http-api service.

Compensating Controls: Deploy a Web Application Firewall (WAF) or intrusion detection system to filter and block malicious payloads containing shell metacharacters directed at the API endpoints.

Public Exploit Available: Yes — a published proof-of-concept exists, as documented in the security researcher's write-up at https://github.com/XavLimSG/Vulnerability-Research/blob/main/CVE-2026-2629/CVE-2026-2629.md.

Due to the absence of an official vendor patch and the availability of a public proof-of-concept, users must treat this vulnerability with high urgency. Immediately isolate affected instances from external networks and disable the vulnerable TTS provider to mitigate the risk of unauthorized remote command execution. Monitor vendor communication channels closely for the release of a permanent fix.