OS Command Injection in SadTalker via Filename Interpolation

SadTalker contains an OS command injection vulnerability (CVE-2026-85696) within its video muxing process. The vulnerability occurs because uploaded audio filenames are directly interpolated into system shell commands (specifically calls to ffmpeg) without appropriate sanitization or escaping. By providing a crafted filename containing shell metacharacters, an unauthenticated attacker can escape the intended shell arguments and execute arbitrary commands on the host operating system with the privileges of the application process. Given that ffmpeg is a standard dependency for video processing, this flaw impacts deployments of SadTalker on any host operating system. Defenders should prioritize identifying instances of this software and ensuring user-supplied filenames are treated as untrusted input.

Impact

Successful exploitation of this vulnerability allows for unauthenticated remote code execution on the server running the SadTalker application. This can lead to full system compromise, data exfiltration, or the installation of persistent malicious payloads.

Recommendation

• Implement strict input validation on all user-supplied filenames before passing them to system calls or external binaries.
• Apply the vendor-provided security patch or upgrade to the version that remediates CVE-2026-85696 as soon as it becomes available.
• Review web application logs for POST requests containing unusual characters such as semicolons, ampersands, or pipe operators within file upload parameters.
• Run the application in a hardened container with minimal filesystem permissions to limit the scope of potential command execution.