Attack Chain

1. An unauthenticated remote attacker identifies a SoftVC VITS Singing Voice Conversion instance exposing the vulnerable full-song inference server.
2. The attacker crafts a malicious HTTP POST request targeting the /wav2wav route of the application.
3. The request includes an audio_path parameter containing path traversal sequences (e.g., ../../../../etc/passwd) to specify an arbitrary file on the server's filesystem.
4. The vulnerable server receives the request and passes the attacker-controlled audio_path value directly to file loading functions such as librosa.load or torchaudio.load.
5. The application reads the content of the arbitrary file (e.g., /etc/passwd) from the server's filesystem.
6. The content of the accessed file is then decoded and included in the HTTP response body, effectively exfiltrating the data to the attacker.
7. Alternatively, the attacker can specify a writable arbitrary path in the audio_path parameter, causing soundfile.write to create a .wav file at the specified location with attacker-controlled content.

Impact

Successful exploitation of CVE-2026-65701 can lead to severe consequences for affected organizations. Attackers can read sensitive configuration files, user data, source code, or other proprietary information directly from the server's filesystem, leading to unauthorized disclosure and data exfiltration. The ability to write arbitrary .wav files to any location on the filesystem can also be abused for denial-of-service, planting malicious executables, or achieving persistence by writing web shells in publicly accessible directories. The high CVSS score of 9.1 reflects the critical nature of this vulnerability, indicating potential for complete compromise of confidentiality, integrity, and availability.

Recommendation

• Patch CVE-2026-65701: Immediately update SoftVC VITS Singing Voice Conversion to a version beyond commit 730930d to remediate CVE-2026-65701.
• Deploy the Sigma rule to your SIEM to detect attempts at exploiting this vulnerability.
• Enable web server access logging for the webserver category to ensure HTTP POST requests and their parameters to /wav2wav are recorded for detection and forensics.