GHSL-2025-045: _GHSL-2025-048: Command injection in GPT-SoVITS - CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, CVE-2025-49836
Published Jun 27, 2025
·Updated
GPT-SoVITS is vulnerable to multiple command injections.
Affected Software
1 affected component
Rvc-boss GPT-SoVITS
Event History
Jun 27, 2025
Advisory Published
via GitHub Security Lab·12:00 AM
Data Sourced
via GitHub Security Lab·12:00 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of GHSL-2025-045?
The severity of GHSL-2025-045 is rated at 80, indicating a high-level risk.
2
What vulnerabilities are associated with GHSL-2025-045?
GHSL-2025-045 is associated with multiple command injection vulnerabilities identified as CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, and CVE-2025-49836.
3
How do I fix GHSL-2025-045?
To fix GHSL-2025-045, update GPT-SoVITS to the latest version that patches the command injection vulnerabilities.
4
Who is affected by GHSL-2025-045?
Users and developers of Rvc-boss GPT-SoVITS are affected by GHSL-2025-045 due to the command injection vulnerabilities.
5
What types of attacks are possible with GHSL-2025-045?
GHSL-2025-045 can lead to command injection attacks, allowing unauthorized commands to be executed on the server.