PT-2025-19764 · Vits+2 · Vits+2

Sylwia Budzynska + 1 · Published 2025-05-05 · Updated 2025-08-01 · CVE-2025-43849

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Retrieval-based-Voice-Conversion-WebUI versions 2.2.231006 and prior

Description The issue concerns a voice changing framework based on VITS, where unsafe deserialization can occur. The ckpt a and cpkt b variables take user input, such as a path to a model, and pass it to the merge function in process ckpt.py. This function uses torch.load to load models from the provided paths, which can lead to unsafe deserialization and remote code execution. No known patches exist as of the time of publication.

Recommendations For versions 2.2.231006 and prior, consider disabling the merge function in process ckpt.py until a patch is available to prevent unsafe deserialization. Restrict access to the ckpt a and cpkt b variables to minimize the risk of exploitation. Avoid using the torch.load function with untrusted input until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-43849

Affected Products

Retrieval-Based-Voice-Conversion-Webui

Vits

Torch

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43849.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-43849 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43849 · Security Note
• https://securitylab.github.com/advisories/GHSL-2025-012_GHSL-2025-022_Retrieval-based-Voice-Conversion-WebUI · Vendor Advisory
• https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/9f2f0559e6932c10c48642d404e7d2e771d9db43/infer-web.py#L1357 · Note
• https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/9f2f0559e6932c10c48642d404e7d2e771d9db43/infer-web.py#L1398 · Note
• https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/9f2f0559e6932c10c48642d404e7d2e771d9db43/infer-web.py#L1358 · Note
• https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/7ef19867780cf703841ebafb565a4e47d1ea86ff/infer/lib/train/process_ckpt.py#L196 · Note
• https://twitter.com/CveFindCom/status/1919460544290955725 · Twitter Post
• https://t.me/cveNotify/130581 · Telegram Post
• https://twitter.com/CVEnew/status/1919465742031806915 · Twitter Post
• https://t.me/cvedetector/24492 · Telegram Post
• https://twitter.com/cybercronai/status/1920052342105264427 · Twitter Post
• https://t.me/latest_high_impact_cve/2274 · Telegram Post