GHSL-2025-053: GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841
Published Jun 27, 2025
·Updated
GPT-SoVITS is vulnerable to multiple unsafe deserializations, which lead to remote code execution.
Affected Software
1 affected component
Rvc-boss GPT-SoVITS
Event History
Jun 27, 2025
Advisory Published
via GitHub Security Lab·12:00 AM
Data Sourced
via GitHub Security Lab·12:00 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of GHSL-2025-053?
GHSL-2025-053 has a risk rating of 89, indicating a critical vulnerability.
2
How do I fix GHSL-2025-053?
To fix GHSL-2025-053, update the GPT-SoVITS software to the latest version available.
3
What impact does GHSL-2025-053 have on my system?
GHSL-2025-053 can lead to remote code execution, allowing attackers to run arbitrary code on your system.
4
Which versions of GPT-SoVITS are affected by GHSL-2025-053?
GHSL-2025-053 affects multiple versions of GPT-SoVITS where unsafe deserialization vulnerabilities exist.
5
Is GHSL-2025-053 being actively exploited?
While there are reports of potential exploitation associated with GHSL-2025-053, monitoring for updates is advised.