Vulnerability · Published Jul 20, 2026 · Assigned by VulnCheck

CVE-2026-63766GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

Critical 9.8

In plain English

A critical-severity OS command injection in GPT-SoVITS from RVC-Boss. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)2.1%top 17.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject shell metacharacters through path parameters to execute arbitrary OS commands as the server process user without authentication.

Affected products (as reported)

Vendor	Product	Versions
RVC-Boss	GPT-SoVITS	0 – through 20250606v2pro

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Researcher Disclosure technical-description, issue-tracking
https://www.vulncheck.com/advisories/gpt-sovits-20250606v2pro-os-command-injection-via-webui-py third-party-advisory