TI-2026-58807 CVE-2026-85696 · GHSA-f5r3-rf2m-jcvxSadTalker OS Command Injection via Audio FilenamePriority MEDIUM 53SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping.CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.02574 · Published 2026-09-04 · No fix listed CWE-78