CVE Intelligence

Vulnerabilidades de RVC-Boss

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de RVC-Boss: 1 registro(s), com severidade, exploração e correções.

GPT-SoVITS 1

Somente exploradas (KEV) →

CVE-2025-71429 Crítica · 9.8 CWE-78 12/10/2026
GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $(...) in the UVR5 WebUI output folder textboxes with mp3 or m4a export to run commands as the server user.