Critical Zero-Click Command Injection in AVideo Platform Enables Stream Hijacking