Gpt Sovits
Monthly
OS command injection in GPT-SoVITS (RVC-Boss) through release 20250606v2pro lets remote unauthenticated attackers run arbitrary commands via the Gradio web UI. The webui.py helper functions for ASR, audio slicing, denoise, and UVR5 vocal separation build shell commands with shell=True and splice user-supplied path textbox values directly into them, so shell metacharacters in a path field are executed by the host. The CVSS 4.0 score is 9.3; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivially triggerable against any exposed instance.
OS command injection in GPT-SoVITS (RVC-Boss) through release 20250606v2pro lets remote unauthenticated attackers run arbitrary commands via the Gradio web UI. The webui.py helper functions for ASR, audio slicing, denoise, and UVR5 vocal separation build shell commands with shell=True and splice user-supplied path textbox values directly into them, so shell metacharacters in a path field are executed by the host. The CVSS 4.0 score is 9.3; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivially triggerable against any exposed instance.