{"id":"CVE-2025-71429","published":"2026-10-12T21:17:07.817","lastModified":"2026-10-16T19:18:44.867","description":"GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $(...) in the UVR5 WebUI output folder textboxes with mp3 or m4a export to run commands as the server user.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://github.com/RVC-Boss/GPT-SoVITS","tags":[]},{"url":"https://github.com/RVC-Boss/GPT-SoVITS/blob/d7c2210da8c013e81a94bfc7b811a477c99fd506/tools/uvr5/vr.py#L143","tags":[]},{"url":"https://github.com/RVC-Boss/GPT-SoVITS/issues/2319","tags":[]},{"url":"https://www.vulncheck.com/advisories/gpt-sovits-through-20250606v2pro-os-command-injection-via-uvr5-vr-py","tags":[]}],"exploitRefs":[{"url":"https://github.com/RVC-Boss/GPT-SoVITS","tags":[]},{"url":"https://github.com/RVC-Boss/GPT-SoVITS/blob/d7c2210da8c013e81a94bfc7b811a477c99fd506/tools/uvr5/vr.py#L143","tags":[]},{"url":"https://github.com/RVC-Boss/GPT-SoVITS/issues/2319","tags":[]}],"hasPoc":true,"ai":{"summary":"GPT-SoVITS contains an OS command injection vulnerability in its UVR5 module that allows unauthenticated attackers to execute arbitrary commands as the server user by manipulating output folder paths during audio export operations.","exploitability":"The vulnerability is highly exploitable with no authentication required, allowing attackers to inject shell commands through the WebUI's output folder textboxes when exporting audio files in mp3 or m4a formats.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary commands on the server with the privileges of the running service, potentially leading to full system compromise and data exfiltration.","remediation":"Disable the UVR5 WebUI export functionality or restrict access to the affected endpoints until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","command-injection"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:47:30.034Z"}}