CVE-2026-85696: SadTalker OS Command Injection via Audio Filename
SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
SadTalker deployments that allow untrusted users to upload audio files and trigger video generation are exposed, because the vulnerable muxing process uses the uploaded audio filename when building an ffmpeg command.
What must an attacker do to exploit it?
An attacker needs to upload an audio file whose filename contains shell metacharacters, then cause video generation to run. No authentication, user interaction, or special access is indicated by the supplied CVSS vector.
What is the impact of successful exploitation?
Successful exploitation can allow arbitrary system command execution on the SadTalker host. The provided severity vector indicates high confidentiality, integrity, and availability impact.