CVE-2025-49841: GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841
GPT-SoVITS is vulnerable to multiple unsafe deserializations, which lead to remote code execution.
Other sources
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in processckpt.py. The SoVITSdropdown variable takes user input and passes it to the loadsovitsnew function in processckpt.py. In loadsovitsnew, the user input, here sovitspath is used to load a model with torch.load, leading to unsafe deserialization. At time of publication, no known patched versions are available.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49841?
CVE-2025-49841 is classified as a high severity vulnerability due to its potential for unsafe deserialization allowing arbitrary code execution.
How do I fix CVE-2025-49841?
To mitigate CVE-2025-49841, upgrade GPT-SoVITS-WebUI to version 20250301v4 or later, which addresses the unsafe deserialization issue.
What versions of GPT-SoVITS-WebUI are affected by CVE-2025-49841?
CVE-2025-49841 affects GPT-SoVITS-WebUI versions up to and including 20250228v3.
Why is CVE-2025-49841 a concern for users of GPT-SoVITS-WebUI?
CVE-2025-49841 is a concern because it allows attackers to exploit unsafe deserialization, potentially leading to remote code execution.
Is user input related to CVE-2025-49841?
Yes, CVE-2025-49841 involves user input being passed unsafely to functions in process_ckpt.py, making it an attack vector.