CVE-2025-71429: GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py

Q: Who is exposed to exploitation?

Instances of GPT-SoVITS through 20250606v2pro that expose the UVR5 WebUI to unauthenticated users are exposed. An attacker can execute commands with the privileges of the account running the server.

Q: What input and conditions are required to exploit the issue?

The attacker needs access to the UVR5 WebUI output-folder textboxes and must use MP3 or M4A export. Shell substitutions such as $(...) placed in an output-folder path can trigger command execution.

Q: Are default deployments affected?

The issue does not require authentication, so a deployment is affected if unauthenticated users can reach the UVR5 WebUI. The provided data does not state whether the WebUI is network-exposed by default.

Q: How can I check whether an instance is affected?

Verify whether the deployment is GPT-SoVITS version 20250606v2pro or earlier and whether users can access the UVR5 WebUI. Test only in a controlled environment: the vulnerable path is the output-folder handling in tools/uvr5/vr.py when exporting MP3 or M4A.

Published Oct 12, 2026

Updated

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $(...) in the UVR5 WebUI output folder textboxes with mp3 or m4a export to run commands as the server user.

Affected Software

1 affected component

GPT-SoVITS GPT-SoVITS<=20250606v2pro

Event History

Oct 12, 2026

CVE Published

via MITRE·08:55 PM

Data Sourced

via MITRE·08:55 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Event

via NVD·10:15 PM

Frequently Asked Questions

Who is exposed to exploitation?

Instances of GPT-SoVITS through 20250606v2pro that expose the UVR5 WebUI to unauthenticated users are exposed. An attacker can execute commands with the privileges of the account running the server.

What input and conditions are required to exploit the issue?

The attacker needs access to the UVR5 WebUI output-folder textboxes and must use MP3 or M4A export. Shell substitutions such as $(...) placed in an output-folder path can trigger command execution.

Are default deployments affected?

The issue does not require authentication, so a deployment is affected if unauthenticated users can reach the UVR5 WebUI. The provided data does not state whether the WebUI is network-exposed by default.

How can I check whether an instance is affected?

Verify whether the deployment is GPT-SoVITS version 20250606v2pro or earlier and whether users can access the UVR5 WebUI. Test only in a controlled environment: the vulnerable path is the output-folder handling in tools/uvr5/vr.py when exporting MP3 or M4A.

CVE-2025-71429: GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py

Affected Software

Event History

Frequently Asked Questions

Who is exposed to exploitation?

What input and conditions are required to exploit the issue?

Are default deployments affected?

How can I check whether an instance is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to exploitation?

What input and conditions are required to exploit the issue?

Are default deployments affected?

How can I check whether an instance is affected?