GHSL-2025-048: GHSL-2025-045_GHSL-2025-048: Command injection in GPT-SoVITS - CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, CVE-2025-49836
Published Jun 27, 2025
·Updated
GPT-SoVITS is vulnerable to multiple command injections.
Affected Software
1 affected component
Rvc-boss GPT-SoVITS
Event History
Jun 27, 2025
Advisory Published
via GitHub Security Lab·12:00 AM
Data Sourced
via GitHub Security Lab·12:00 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of GHSL-2025-048?
The severity of GHSL-2025-048 is rated at 80, indicating a high risk.
2
How do I fix GHSL-2025-048?
To fix GHSL-2025-048, update to the patched version of GPT-SoVITS available in the latest release.
3
What types of vulnerabilities are associated with GHSL-2025-048?
GHSL-2025-048 is associated with multiple command injection vulnerabilities.
4
Which software is affected by GHSL-2025-048?
GHSL-2025-048 affects the Rvc-boss GPT-SoVITS software.
5
Are there multiple CVEs linked to GHSL-2025-048?
Yes, GHSL-2025-048 is linked to multiple CVEs including CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, and CVE-2025-49836.