GHSL-2025-049: _GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841
Published Jun 27, 2025
·Updated
GPT-SoVITS is vulnerable to multiple unsafe deserializations, which lead to remote code execution.
Affected Software
1 affected component
Rvc-boss GPT-SoVITS
Event History
Jun 27, 2025
Advisory Published
via GitHub Security Lab·12:00 AM
Data Sourced
via GitHub Security Lab·12:00 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of GHSL-2025-049?
The severity of GHSL-2025-049 is rated at 89, indicating a critical risk.
2
How do I fix GHSL-2025-049?
To fix GHSL-2025-049, upgrade to the patched version of GPT-SoVITS as specified in the most recent release.
3
What types of vulnerabilities are associated with GHSL-2025-049?
GHSL-2025-049 is associated with multiple unsafe deserialization vulnerabilities leading to remote code execution.
4
What systems are affected by GHSL-2025-049?
Systems running the vulnerable versions of Rvc-boss GPT-SoVITS are affected by GHSL-2025-049.
5
Are there known exploits for GHSL-2025-049?
Yes, GHSL-2025-049 has potential exploits that leverage remote code execution vulnerabilities.