CVE-2025-43842

The CVE-2025-43842 entry concerns Retrieval-based-Voice-Conversion-WebUI (VITS-based). Affected: versions 2.2.231006 and earlier. The root cause: user-provided inputs in variables exp_dir1, np7, trainset_dir4, and sr2 are fed into preprocess_dataset, concatenated into a server-side command, enabl...

CVE-2025-43851

The CVE-2025-43851 entry concerns Retrieval-based-Voice-Conversion-WebUI (RVC) with versions 2.2.231006 and earlier. The root cause is unsafe deserialization in Python code: user-controlled input (model_choose) is passed to the uvr function, which creates an AudioPre instance and uses torch.load ...

CVE-2025-43849

CVE-2025-43849 affects Retrieval-based-Voice-Conversion-WebUI (RVC-Project). Versions up to 2.2.231006 are vulnerable due to unsafe deserialization in process_ckpt.py: the ckpt_a and cpkt_b inputs are passed to the merge function, which uses torch.load on user-provided paths, enabling remote code...

CVE-2025-43844

CVE-2025-43844 affects Retrieval-based-Voice-Conversion-WebUI (VITS-based) with versions 2.2.231006 and earlier. The root cause is that input variables (e.g., exp_dir1) are passed into the click_train function and concatenated into a shell command executed on the server, enabling arbitrary comman...

CVE-2025-43852

CVE-2025-43852 affects Retrieval-based-Voice-Conversion-WebUI (RVC-Project). The vulnerable component is the code path in VR where the model path input is assigned to the AudioPreDeEcho class via the model_name check for the string "DeEcho"; within AudioPreDeEcho, user input is passed to torch.lo...

CVE-2025-43843

CVE-2025-43843 affects Retrieval-based-Voice-Conversion-WebUI (RVC-Project)

CVE-2025-43845

CVE-2025-43845 affects Retrieval-based-Voice-Conversion-WebUI (RVC-Project) up to version 2.2.231006. The root cause is a vulnerable ckpt_path2 handling: user input is passed to change_info_ which opens the path (altering to train.log) and feeds file contents to eval, enabling remote code executi...

CVE-2025-43847

CVE-2025-43847 affects Retrieval-based-Voice-Conversion-WebUI (RVC) up to version 2.2.231006. The flaw is unsafe deserialization via the ckpt_path2 input passed to process_ckpt.py’s extract_small_model, which uses torch.load to load a model from a user-supplied path. This leads to remote code exe...

CVE-2025-43848

CVE-2025-43848 affects Retrieval-based-Voice-Conversion-WebUI (RVC-Project) up to version 2.2.231006. The flaw is unsafe deserialization in process_ckpt.py: ckpt_path0 accepts user input (e.g., a model path) and passes it to torch.load via change_info, enabling remote code execution. At publicati...

CVE-2025-43850

The CVE affects Retrieval-based-Voice-Conversion-WebUI (RVC) versions 2.2.231006 and earlier. The root cause is unsafe deserialization: the ckpt_dir input is passed to export.py’s change_info function, which loads a model with torch.load, enabling remote code execution. Public documentation confi...

CVE-2025-43846

CVE-2025-43846 affects the Retrieval-based-Voice-Conversion-WebUI project (RVC-Project). Vulnerability: unsafe deserialization in the code path that uses the ckpt_path1 variable, which is passed to show_info in process_ckpt.py and used with torch.load to load a model file. This enables remote cod...