CVE-2026-85696 Details

A command injection vulnerability has been identified in SadTalker versions through 0.0.2. The issue arises during the video muxing process, where uploaded audio file names are incorporated into ffmpeg command strings without adequate escaping. This flaw allows attackers to upload audio files with shell metacharacters in the file name, disrupting the command's quoted arguments and executing arbitrary system commands when the video is generated.

To address this vulnerability, it is recommended to sanitize audio file names to remove or escape shell metacharacters before using them in command execution. Additionally, replace the use of 'os.system' with 'subprocess.run' to prevent shell injection, and require authentication for the WebUI when it is exposed to the network.