OS Command Injection in GPT-SoVITS UVR5 Component

GPT-SoVITS versions through 20250606v2pro contain an OS command injection vulnerability in the tools/uvr5/vr.py component. The vulnerability arises from improper neutralization of user-supplied input within the UVR5 WebUI, specifically the folder path configuration fields used for mp3 or m4a audio exports. An unauthenticated attacker can exploit this by crafting malicious input containing shell substitution syntax, such as $(command). When the application processes the export, it passes this tainted path to the underlying system shell, resulting in the execution of arbitrary commands with the privileges of the service user. This vulnerability presents a high risk as it requires no prior authentication and provides a direct path to system compromise.

Impact

Successful exploitation allows for full remote code execution on the server hosting the GPT-SoVITS application. Depending on the environment, this could lead to complete system takeover, unauthorized data access, persistence installation, or lateral movement within the network. The vulnerability affects all users of GPT-SoVITS versions up to 20250606v2pro.

Recommendation

• Update GPT-SoVITS instances to a version released after 20250606v2pro that includes sanitization for the UVR5 output folder parameters.
• Apply strict input validation on all web application parameters that interface with filesystem or shell operations.
• Run the application with the least-privileged service account possible to limit the impact of potential command execution.