CVE-2025-43847: GHSL-2025-017_Retrieval-based-Voice-Conversion-WebUI
First published: Mon May 05 2025(Updated: )
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckpt_path2 variable takes user input (e.g. a path to a model) and passes it to the extract_small_model function in process_ckpt.py, which uses it to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Retrieval-based Voice Conversion WebUI | <2.2.231006 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://securitylab.github.com/advisories/GHSL-2025-012_GHSL-2025-022_Retrieval-based-Voice-Conversion-WebUI/
- https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/7ef19867780cf703841ebafb565a4e47d1ea86ff/infer/lib/train/process_ckpt.py#L64C1-L66C52
- https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/9f2f0559e6932c10c48642d404e7d2e771d9db43/infer-web.py#L1452
- https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/9f2f0559e6932c10c48642d404e7d2e771d9db43/infer-web.py#L1486
Frequently Asked Questions
What is the severity of CVE-2025-43847?
CVE-2025-43847 is categorized as a high-severity vulnerability due to the potential for unsafe deserialization.
How do I fix CVE-2025-43847?
To fix CVE-2025-43847, upgrade the Retrieval-based Voice Conversion WebUI to version 2.2.231007 or later.
Which versions are affected by CVE-2025-43847?
CVE-2025-43847 affects Retrieval-based Voice Conversion WebUI versions up to and including 2.2.231006.
What are the potential risks of CVE-2025-43847?
The risks associated with CVE-2025-43847 include execution of arbitrary code and compromise of the application environment.
What input causes the vulnerability in CVE-2025-43847?
CVE-2025-43847 is triggered by user input via the ckpt_path2 variable, which affects model extraction in the application.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/author
- agent/severity
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/retrieval-based-voice-conversion-webui
- canonical/retrieval-based voice conversion webui