duhow xiaoai-patch

• CVE-2026-72581 High 8.6 duhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint 0.5%
• CVE-2026-72580 Critical 9.8 duhow xiaoai-patch - OS Command Injection in /mute and /unmute Endpoints 1.7%