PT-2025-19766 · Unknown · Retrieval-Based-Voice-Conversion-Webui

Sylwia Budzynska

+1

·

Published

2025-05-05

·

Updated

2025-08-01

·

CVE-2025-43851

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Retrieval-based-Voice-Conversion-WebUI versions 2.2.231006 and prior
Description Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. The model choose variable takes user input, such as a path to a model, and passes it to the uvr function in vr.py. In uvr, a new instance of the AudioPre class is created with the model path attribute containing the aforementioned user input. In the AudioPre class, the user input is used to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of the time of publication, no known patches exist.
Recommendations For versions 2.2.231006 and prior, as a temporary workaround, consider disabling the uvr function in vr.py until a patch is available. Restrict access to the AudioPre class to minimize the risk of exploitation. Avoid using the model choose variable in the affected code until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Deserialization of Untrusted Data

Weakness Enumeration

Related Identifiers

CVE-2025-43851

Affected Products

Retrieval-Based-Voice-Conversion-Webui