CVE-2026-63766
Received Received - Intake

GPT-SoVITS OS Command Injection via Unsanitized Gradio Inputs

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: VulnCheck

Description
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject shell metacharacters through path parameters to execute arbitrary OS commands as the server process user without authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-63766
EUVD
EUVD-2026-46077

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
rvc-boss gpt-sovits 20250606v2pro
rvc-boss gpt-sovits to 20250606v2pro (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an OS command injection flaw in GPT-SoVITS through 20250606v2pro. It occurs in webui.py where user inputs from Gradio textbox fields are directly interpolated into shell commands executed with shell=True. Attackers can inject shell metacharacters through path parameters to execute arbitrary OS commands as the server process user without authentication.

Detection Guidance

Check if GPT-SoVITS WebUI is running on port 0.0.0.0 without authentication. Inspect webui.py for shell=True usage with user input interpolation. Look for Gradio textbox fields in ASR, slice, denoise, or uvr5 functions that accept path parameters.

Impact Analysis

An attacker could exploit this to run arbitrary commands on the server hosting GPT-SoVITS, potentially gaining control over the system. This could lead to data theft, system compromise, or disruption of services. Since no authentication is required, any network-accessible instance is at risk.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR and HIPAA requirements for data protection and access control. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage due to potential exposure of sensitive data.

Mitigation Strategies

Stop the GPT-SoVITS WebUI service immediately. Update to the latest patched version if available. If no patch exists, modify webui.py to avoid shell=True by using command argument lists. Implement strict input sanitization to block shell metacharacters. Restrict WebUI binding to localhost and enforce authentication.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63766. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart