Read the docs

RVC-Boss

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

RVC-Boss records in CISA KEV

No RVC-Boss vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gpt-sovits-webui 9 records HIGH

Records

11 records

TI-2026-45353 CVE-2026-63766 · GHSA-9673-c4fc-mjq2

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

Priority HIGH 81

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands execute…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02148 Published 2026-07-20 No fix listed CWE-78
TI-2025-43903 CVE-2025-71429 · GHSA-x4wc-gwq5-xx9p

OS command injection in GPT-SoVITS UVR5 output folder paths

Priority MEDIUM 53

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02873 Published 2026-10-12 No fix listed CWE-78
Open these records in search →