CVE-2025-43847: GHSL-2025-012_GHSL-2025-022: Multiple vulnerabilities in Retrieval-based-Voice-Conversion-WebUI - CVE-2025-43842_CVE-2025-43852
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckptpath2 variable takes user input (e.g. a path to a model) and passes it to the extractsmallmodel function in processckpt.py, which uses it to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist.
Other sources
Retrieval-based-Voice-Conversion-WebUI is vulnerable to commandline injection
— GitHub Security Lab
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43847?
CVE-2025-43847 is categorized as a high-severity vulnerability due to the potential for unsafe deserialization.
How do I fix CVE-2025-43847?
To fix CVE-2025-43847, upgrade the Retrieval-based Voice Conversion WebUI to version 2.2.231007 or later.
Which versions are affected by CVE-2025-43847?
CVE-2025-43847 affects Retrieval-based Voice Conversion WebUI versions up to and including 2.2.231006.
What are the potential risks of CVE-2025-43847?
The risks associated with CVE-2025-43847 include execution of arbitrary code and compromise of the application environment.
What input causes the vulnerability in CVE-2025-43847?
CVE-2025-43847 is triggered by user input via the ckpt_path2 variable, which affects model extraction in the application.