CVE-2025-49837: GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841
GPT-SoVITS is vulnerable to multiple unsafe deserializations, which lead to remote code execution.
Other sources
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in vr.py AudioPre. The modelchoose variable takes user input (e.g. a path to a model) and passes it to the uvr function. In uvr, a new instance of AudioPre class is created with the modelpath attribute containing the aforementioned user input (here called locally modelname). Note that in this step the .pth extension is added to the path. In the AudioPre class, the user input, here called modelpath, is used to load the model on that path with torch.load, which can lead to unsafe deserialization. At time of publication, no known patched versions are available.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49837?
CVE-2025-49837 has been categorized as a moderate severity vulnerability due to the potential for unsafe deserialization leading to security risks.
How do I fix CVE-2025-49837?
To fix CVE-2025-49837, update GPT-SoVITS-WebUI to a version later than 20250228v3 that addresses this vulnerability.
What is the main issue caused by CVE-2025-49837?
CVE-2025-49837 involves an unsafe deserialization vulnerability in the AudioPre module that can be exploited through user input.
Which versions of GPT-SoVITS-WebUI are affected by CVE-2025-49837?
CVE-2025-49837 affects versions of GPT-SoVITS-WebUI up to and including 20250228v3.
How does CVE-2025-49837 impact the GPT-SoVITS-WebUI?
CVE-2025-49837 can potentially allow attackers to execute arbitrary code by exploiting vulnerable deserialization in the webUI.