CVE-2025-71429 is a critical, unauthenticated OS command injection flaw in the UVR5 WebUI of GPT-SoVITS. It lets attackers run commands with the privileges of the server user.
What Is It
CVE-2025-71429 is an OS command injection vulnerability (CWE-78) in RVC-Boss's GPT-SoVITS. It sits in tools/uvr5/vr.py. The NVD description says the flaw is in how the code handles output folder paths. An attacker can put shell substitutions such as $(...) into the output folder textboxes of the UVR5 WebUI. If the export format is mp3 or m4a, those substitutions run as commands with the server user's privileges.
VulnCheck disclosed the issue, and NVD published it on 2026-10-12. The NVD record's status is currently "Received."
Why It Matters
VulnCheck rates the flaw as critical:
- CVSS 3.1: 9.8 (CRITICAL),
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0: 9.3 (CRITICAL)
The vector describes a flaw that can be reached over the network and has low attack complexity. It needs no privileges and no user interaction. A successful attack has a high impact on the confidentiality, integrity and availability of the vulnerable system. Taken together, the CVSS vector and the NVD description suggest that anyone who can reach an exposed UVR5 WebUI with mp3 or m4a export may be able to run commands on the host without logging in. Real-world exposure will depend on how each instance is deployed, for example whether the WebUI is bound to a public interface or sits behind access controls.
Exploitation status: We found no CISA Known Exploited Vulnerabilities (KEV) entry for this CVE when this brief was prepared, so CISA has not confirmed active exploitation. In the CVSS 4.0 scoring published by VulnCheck, the exploit maturity field is "Not Defined."
What's Vulnerable
- Vendor: RVC-Boss
- Product: GPT-SoVITS
- Affected versions: all versions through
20250606v2pro - Affected component:
tools/uvr5/vr.py(UVR5 WebUI output folder handling with mp3/m4a export)
NVD has not yet listed any CPEs for this record.
Patch Status
Neither the NVD record nor the VulnCheck advisory names a fixed version or an official patch. Because the CVE is not in the KEV catalog, there is no CISA required action or due date. Operators running GPT-SoVITS 20250606v2pro or earlier should watch the project repository and GitHub issue #2319 for a fix. Until a fix is available, they should treat any network-exposed UVR5 WebUI as potentially at risk of unauthenticated command execution.