Tracking: CVE-2026-79535
Severity: No CVSS severity assigned in the reviewed CVE record
Who is affected
VoiceMode through 8.10.1 when a caller can use update_config or voicemode config set. The maintainer says the config tools are optional and absent from the default MCP tool set.
How the attack works
Configuration values are written to ~/.voicemode/voicemode.env without safe shell quoting. The Whisper and serve startup scripts subsequently load that file using source, which evaluates embedded shell substitutions. The command runs on the next service start or reboot, with the service account's privileges.
This is delayed execution through configuration. A successful write may leave a payload waiting even if no suspicious process appeared at the time of the tool call.
What to do
- Upgrade to 8.10.2 or later. The fix safely quotes writes, rejects control characters, and changes startup scripts to parse values as data.
- Inspect existing configuration files before restarting services. The release notes say existing files are migrated to safe quoting on the next
config set. - Restrict configuration tools to trusted callers and investigate unexpected commands following service starts.