Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck
CVE-2026-85696SadTalker OS Command Injection via Audio Filename
Critical 9.8
In plain English
A critical-severity OS command injection in SadTalker from OpenTalker. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)2.6%top 14.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenTalker | SadTalker | 0 – through 0.0.2 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- GitHub Issue #1043 issue-tracking
- https://github.com/OpenTalker/SadTalker product
- https://github.com/OpenTalker/SadTalker/blob/v0.0.2/src/utils/videoio.py technical-description
- VulnCheck Advisory: SadTalker OS Command Injection via Audio Filename third-party-advisory