EUVD-2026-71145
GHSA-f5r3-rf2m-jcvx
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable upload path with no auth or interaction in exposed deployments yields PR:N/UI:N/AC:L; shell command injection gives full C:H/I:H/A:H.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.
AnalysisAI
Remote code execution in OpenTalker SadTalker allows attackers to run arbitrary OS commands by supplying audio files whose names contain shell metacharacters, which are interpolated unescaped into ffmpeg command lines during video muxing (CWE-78). Any deployment that accepts attacker-influenced audio uploads and then generates video is affected; the flaw was reported by VulnCheck with an accompanying advisory, though no public exploit code or active exploitation has been identified at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the attacker can influence the audio file's name (upload or otherwise control the filename) AND that a video-generation/muxing operation is subsequently performed on that file, invoking the vulnerable ffmpeg command construction in src/utils/videoio.py. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals align toward high real-world risk: CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:N with VC:H/VI:H/VA:H indicates a network-reachable, low-complexity, unauthenticated path to full compromise, consistent with SadTalker instances exposed via web/Gradio front-ends that accept uploads. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version is identified in the provided data, so track the VulnCheck advisory (https://www.vulncheck.com/advisories/sadtalker-os-command-injection-via-audio-filename) and GitHub issue #1043 for an official fix. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Disable or air-gap all SadTalker deployments accepting untrusted audio files; review system logs for audio uploads with special characters and unusual video generation requests. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today