CVE-2025-49838: GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841
GPT-SoVITS is vulnerable to multiple unsafe deserializations, which lead to remote code execution.
Other sources
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in vr.py AudioPreDeEcho. The modelchoose variable takes user input (e.g. a path to a model) and passes it to the uvr function. In uvr, a new instance of AudioPreDeEcho class is created with the modelpath attribute containing the aforementioned user input (here called locally modelname). Note that in this step the .pth extension is added to the path. In the AudioPreDeEcho class, the user input, here called modelpath, is used to load the model on that path with torch.load, which can lead to unsafe deserialization. At time of publication, no known patched versions are available.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49838?
CVE-2025-49838 has been classified with a severity rating that indicates it poses a significant risk due to unsafe deserialization.
How do I fix CVE-2025-49838?
To mitigate CVE-2025-49838, update GPT-SoVITS-WebUI to a version later than 20250228v3 to eliminate the unsafe deserialization issue.
What versions of GPT-SoVITS-WebUI are affected by CVE-2025-49838?
CVE-2025-49838 affects versions of GPT-SoVITS-WebUI up to and including 20250228v3.
What type of vulnerability is CVE-2025-49838?
CVE-2025-49838 is classified as an unsafe deserialization vulnerability in the AudioPreDeEcho component.
How does CVE-2025-49838 affect user input?
CVE-2025-49838 allows user input, such as model paths, to be processed unsafely, potentially leading to arbitrary code execution.