SoftVC VITS Path Traversal in Full-Song Inference Server

Executive Summary

CVE-2026-65701 is a path traversal vulnerability in SoftVC VITS Singing Voice Conversion affecting versions up to commit 730930d. It exists in the full-song inference server's /wav2wav Flask route. Unauthenticated remote attackers can read arbitrary files by submitting attacker-controlled filesystem paths through the audio_path field in a POST request. The vulnerability occurs due to improper path validation, allowing attackers to pass arbitrary server-side paths directly to file loading and writing functions.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if the SoftVC VITS Singing Voice Conversion server is running and exposed on your network. Look for active connections to the /wav2wav endpoint using tools like netstat or ss. Test for path traversal by sending a POST request with a malicious audio_path parameter pointing to sensitive files like /etc/passwd or /etc/shadow.

Example curl command to test: curl -X POST http://<target-ip>:<port>/wav2wav -H 'Content-Type: application/json' -d '{"audio_path": "/etc/passwd"}'

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to read sensitive files on the server, including configuration files, source code, or other confidential data. Attackers can also write arbitrary .wav files to any location on the filesystem, potentially overwriting critical system files or planting malicious content. Since the server runs without authentication and binds to 0.0.0.0, it is accessible from any network.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to severe compliance violations. Unauthorized file access may result in exposure of personal data, violating GDPR's data protection requirements. For HIPAA, unauthorized access to protected health information could occur. Both standards require strict access controls and protection of sensitive data, which this vulnerability undermines.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately disable or restrict access to the /wav2wav endpoint. Update the server to reject requests containing filesystem paths in the audio_path parameter. Bind the server to 127.0.0.1 instead of 0.0.0.0 to limit exposure. Remove wildcard CORS policies and implement authentication tokens.

If paths must be accepted, validate them using os.path.realpath, confine to a dedicated input directory, and write output to a controlled temporary directory.

Useful 0 Not Useful 0