CVE-2026-112078
Received Received - Intake

Code Injection in RVC-Project Retrieval-based-Voice-Conversion-WebUI

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulDB

Description
A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change_info_ of the file webui.py. Executing a manipulation of the argument ckpt_path can lead to code injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112078
EUVD
EUVD-2026-104066

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
RVC-Project Retrieval-based-Voice-Conversion-WebUI 2.3.260718

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-112078 is a code injection vulnerability in the Retrieval-based-Voice-Conversion-WebUI (RVC WebUI) up to version 2.3.260718. The flaw occurs in the change_info_ function of webui.py, where attacker-controlled input in the ckpt_path argument can lead to arbitrary code execution via unsafe use of the eval() function. The attack is triggered when a user loads a malicious model pack containing a crafted train.log file with a payload in the message field.

Detection Guidance

Check for suspicious model packs containing a train.log file with executable payloads in the message field. Inspect webui.py for the change_info_ function using eval() on user-controlled input. Monitor for unexpected file reads, writes, or network activity during model loading in RVC WebUI.

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary Python code with the privileges of the WebUI process. Potential impacts include file read/exfiltration, persistence, or model weight replacement. The attack is silent as the payload returns a legitimate dictionary, making it hard to detect. Users loading malicious model packs are at risk.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially allowing attackers to access, modify, or exfiltrate sensitive data processed by the RVC WebUI. For GDPR, this may result in violations of data confidentiality and integrity requirements. Under HIPAA, it could compromise protected health information if voice data is involved.

Mitigation Strategies

Upgrade to a patched version replacing eval() with ast.literal_eval() or JSON parsing. Avoid loading untrusted model packs. Implement strict input validation for train.log files. Monitor for unauthorized model modifications or suspicious activity in the WebUI process.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112078. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart