CVE-2025-49839: GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841
GPT-SoVITS is vulnerable to multiple unsafe deserializations, which lead to remote code execution.
Other sources
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in bsroformer.py. The modelchoose variable takes user input (e.g. a path to a model) and passes it to the uvr function. In uvr, a new instance of RoformerLoader class is created with the modelpath attribute containing the aformentioned user input (here called locally modelname). Note that in this step the .ckpt extension is added to the path. In the RoformerLoader class, the user input, here called modelpath, is used to load the model on that path with torch.load, which can lead to unsafe deserialization. At time of publication, no known patched versions are available.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49839?
CVE-2025-49839 is classified as a high severity vulnerability due to its unsafe deserialization in GPT-SoVITS-WebUI.
How do I fix CVE-2025-49839?
To fix CVE-2025-49839, upgrade to a version of GPT-SoVITS-WebUI later than 20250228v3 that addresses the unsafe deserialization issue.
What versions are affected by CVE-2025-49839?
CVE-2025-49839 affects GPT-SoVITS-WebUI versions up to and including 20250228v3.
What is the impact of CVE-2025-49839 on users?
CVE-2025-49839 may allow an attacker to execute arbitrary code on the server through malicious input.
What is the nature of the vulnerability in CVE-2025-49839?
CVE-2025-49839 involves unsafe deserialization in the bsroformer.py component, allowing potential exploitation via user-supplied input.