CVE-2025-43852

CVE-2025-43852 affects Retrieval-based-Voice-Conversion-WebUI (RVC-Project). The vulnerable component is the code path in VR where the model path input is assigned to the AudioPreDeEcho class via the model_name check for the string "DeEcho"; within AudioPreDeEcho, user input is passed to torch.lo...