CVE-2026-2629

CVE-2026-2629 affects the jishi node-sonos-http-api, specifically the TTS Provider’s mac-os.js, in the Promise function. The issue is an argument-phrase manipulation that enables os command injection. A remote attacker could initiate the attack. Public exploit details exist, and the project uses ...