SecAlerts
g

gpt-sovits

Security Risk Profile

86
/100
critical

Security Risk Score

Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from June 27, 2025 to present

11
Total CVEs
11
Critical+High
0
Exploited
11
Unpatched

Threat Assessment

Avg CVSS
9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
11
Critical/High
Risk Level
86/100
critical
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
2
High
9
Medium
0
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
Command Injection
6
2
OS Command Injection
2

Most Affected Products

1. Rvc-boss Gpt-sovits-webui9
2. GPT-SoVITS GPT-SoVITS-WebUI8
3. GPT-SoVITS GPT-SoVITS2
4. GPT-SoVITS WebUI1

Recent Vulnerabilities

See more →
CVE-2025-71429
CVSS 9.3critical

GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py

Oct 12, 2026🔧 No Patch
CVE-2026-63766
CVSS 9.3critical

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

Jul 20, 2026🔧 No Patch
CVE-2025-49835
CVSS 8.9high

GHSL-2025-045_GHSL-2025-048: Command injection in GPT-SoVITS - CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, CVE-2025-49836

Jun 27, 2025🔧 No Patch
CVE-2025-49836
CVSS 8.9high

GHSL-2025-045_GHSL-2025-048: Command injection in GPT-SoVITS - CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, CVE-2025-49836

Jun 27, 2025🔧 No Patch
CVE-2025-49833
CVSS 8.9high

GHSL-2025-045_GHSL-2025-048: Command injection in GPT-SoVITS - CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, CVE-2025-49836

Jun 27, 2025🔧 No Patch
CVE-2025-49834
CVSS 8.9high

GHSL-2025-045_GHSL-2025-048: Command injection in GPT-SoVITS - CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, CVE-2025-49836

Jun 27, 2025🔧 No Patch
CVE-2025-49837
CVSS 8.9high

GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841

Jun 27, 2025🔧 No Patch
CVE-2025-49839
CVSS 8.9high

GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841

Jun 27, 2025🔧 No Patch
CVE-2025-49838
CVSS 8.9high

GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841

Jun 27, 2025🔧 No Patch
CVE-2025-49841
CVSS 8.9high

GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841

Jun 27, 2025🔧 No Patch

Monitor gpt-sovits in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

gpt-sovits Security Vulnerabilities & Risk Score | 11 CVEs | SecAlerts - SecAlerts