CVE-2026-63766 Details

A command injection vulnerability has been identified in GPT-SoVITS versions through 20250606v2pro. The issue resides in webui.py, where the ASR, slice, denoise, and uvr5 functions directly incorporate unsanitized input from Gradio textboxes into shell commands executed with shell=True. This flaw allows attackers to inject shell metacharacters through path parameters, executing arbitrary OS commands as the user running the server process, without requiring authentication.

To address this vulnerability, remove the use of shell=True with user input. Instead, pass commands as argument lists to Popen, ensuring that paths are not interpreted by the shell. Additionally, enhance the clean_path function to reject shell metacharacters and validate paths. Implement authentication for the WebUI or set it to loopback by default.