Which versions of Gpt Sovits are affected by CVE-2026-63766?

GPT-SoVITS (RVC-Boss) releases through version 20250606v2pro allow unauthenticated remote attackers to execute arbitrary commands on affected systems through the exposed Gradio web interface,…

How to fix or mitigate CVE-2026-63766?

Within 24 hours: scan your infrastructure to identify all GPT-SoVITS instances running version 20250606v2pro or earlier and immediately restrict network access to the Gradio web UI via firewall rules, limiting connections to localhost or VPN-only access. Within 7 days: take all vulnerable instances offline or implement a WAF to block shell metacharacters (semicolons, pipes, backticks, dollar signs) in the path parameters of the ASR, audio slicing, denoise, and UVR5 vocal separation handlers in webui.py. Within 30 days: monitor the GPT-SoVITS repository for a patched release that sanitizes command construction and plan an immediate upgrade; do not restore external network access until patched.

Gpt Sovits CVE-2026-63766

Q: What is the CVSS score of CVE-2026-63766?

CVE-2026-63766 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.4%.

EUVD-2026-46077 CRITICAL

OS Command Injection (CWE-78)

2026-07-20 VulnCheck

GHSA-9673-c4fc-mjq2

Command Injection Gpt Sovits

9.3

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulnCheck) · only source for this CVE.

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 20:17 vuln.today

CVE Published

Jul 20, 2026 - 19:18 cve.org

CRITICAL 9.3

DescriptionCVE.org

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject shell metacharacters through path parameters to execute arbitrary OS commands as the server process user without authentication.

AnalysisAI

OS command injection in GPT-SoVITS (RVC-Boss) through release 20250606v2pro lets remote unauthenticated attackers run arbitrary commands via the Gradio web UI. The webui.py helper functions for ASR, audio slicing, denoise, and UVR5 vocal separation build shell commands with shell=True and splice user-supplied path textbox values directly into them, so shell metacharacters in a path field are executed by the host. The CVSS 4.0 score is 9.3; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivially triggerable against any exposed instance.