Critical OS Command Injection Found in GPT-SoVITS Voice Cloning Tool
Unauthenticated attackers can execute arbitrary system commands via manipulated output folder paths in versions of GPT-SoVITS through 20250606v2pro.
Key points
- The flaw allows remote code execution without authentication via the UVR5 WebUI.
- National Vulnerability Database rates the issue as Critical with a CVSS score of 9.3.
- Attackers exploit shell substitutions in output folder textboxes during audio export.
A critical operating system command injection vulnerability has been identified in GPT-SoVITS, a popular open-source voice cloning and conversion tool. The flaw affects versions released through 20250606v2pro and allows unauthenticated attackers to execute arbitrary commands on the host server.
At a glance
- CVE
- CVE-2025-71429
- Product
- RVC-Boss GPT-SoVITS
- CVSS
- 9.3 Critical
- Weakness
- OS command injection
- Exploited
- No known exploitation
The National Vulnerability Database (NVD) assigned CVE-2025-71429 a CVSS score of 9.3, classifying the severity as Critical. The weakness stems from insufficient input validation in the `tools/uvr5/vr.py` script. Attackers can inject malicious payloads by manipulating the output folder path fields within the UVR5 WebUI interface.
Technical Context and Exploitation
The vulnerability maps to CWE-78, which covers OS command injection flaws. According to the NVD record, the issue arises when the application processes user-supplied data for output directory names without proper sanitization. This allows an attacker to inject shell commands that the underlying operating system will execute.
Specifically, the flaw is triggered during the export process for MP3 or M4A audio files. An attacker can input shell substitution syntax, such as `$(...)`, into the output folder textboxes. When the application attempts to create or write to this directory, the shell interprets the injected syntax as a command, running it with the privileges of the server user.
Affected Software and Scope
The vulnerability impacts GPT-SoVITS software developed by RVC-Boss. The NVD record specifies that all versions up to and including 20250606v2pro are affected. This includes any deployment of the tool that exposes the UVR5 WebUI to untrusted users or networks.
Because the attack does not require authentication, any user with network access to the web interface can potentially exploit the flaw. The impact is remote code execution, meaning an attacker can take full control of the server hosting the application. The server user’s permissions determine the extent of the compromise.
What should you do?
No patch or fix has been confirmed yet by the vendor. Administrators running GPT-SoVITS should immediately restrict network access to the UVR5 WebUI. If the tool is not needed, it should be taken offline until a secure update is available. Monitor server logs for unusual command executions or unexpected process spawns that may indicate exploitation.
What to do and how to stay safe: GPT-SoVITS
- Restrict network access to the GPT-SoVITS web interface to trusted internal IPs only.
- Disable the UVR5 module if voice separation features are not currently required.
- Monitor system logs for unexpected command executions or new processes spawned by the web server user.
- Wait for an official update from RVC-Boss that addresses CVE-2025-71429 before re-enabling public access.
Step-by-step guide: Risk Based Vulnerability Management: Prioritize Fixes by Actual Threat
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the CVSS score for CVE-2025-71429?
The National Vulnerability Database rates the vulnerability as Critical with a CVSS score of 9.3.
Which versions of GPT-SoVITS are affected?
All versions of GPT-SoVITS through 20250606v2pro are affected by this OS command injection flaw.
Do attackers need to log in to exploit this vulnerability?
No, the vulnerability allows unauthenticated attackers to execute commands via the web interface.
