CVE-2026-63766

CRITICAL

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

Title source: cna

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-63766. PoCs published by 0xdak.

AI-analyzed exploit summary This exploit targets an unauthenticated OS command injection vulnerability in GPT-SoVITS's Gradio web UI (CVE-2026-63766). The exploit leverages unsanitized path values in audio-processing helpers, injecting shell commands via command substitution in the `asr_opt_dir` parameter.

Description

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject shell metacharacters through path parameters to execute arbitrary OS commands as the server process user without authentication.

Exploits (1)

github WORKING POC

by 0xdak · pythonpoc

https://github.com/0xdak/CVE-2026-63766_exploit

View Code ZIP pw:eip

This exploit targets an unauthenticated OS command injection vulnerability in GPT-SoVITS's Gradio web UI (CVE-2026-63766). The exploit leverages unsanitized path values in audio-processing helpers, injecting shell commands via command substitution in the `asr_opt_dir` parameter.

Classification

Working Poc 99%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: GPT-SoVITS <= 20250606v2pro

No auth needed

Prerequisites: Gradio web UI running on the target (default port 9874) · Gradio client installed on attacker's machine (`pip install gradio_client`) · Network access to the target's web UI

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

mistral-large-3 · analyzed Jul 23, 2026 Full analysis →

References (2)

Core 2

Core References

Technical Description technical-description issue-tracking

Researcher Disclosure

https://github.com/RVC-Boss/GPT-SoVITS/issues/2793

Third Party Advisory third-party-advisory

https://www.vulncheck.com/advisories/gpt-sovits-20250606v2pro-os-command-injection-via-webui-py

Scores

CVSS v3 9.8

EPSS 0.0175

EPSS Percentile 75.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

Details

CWE

CWE-78

Status published

Products (1)

RVC-Boss/GPT-SoVITS < 20250606v2pro

Published Jul 20, 2026

Tracked Since Jul 21, 2026