Skip to content
Heist/ feed
Back to feed
High

GHSL-2025-021_Retrieval-based-Voice-Conversion-WebUI

Type: advisorySources: OSV

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The model_choose variable takes user input (e.g. a path to a model) and passes it to the uvr function in vr.py. In uvr , a new instance of AudioPre class is created with the model_path attribute containing the aformentioned user input. In the AudioPre class, the user input, is used to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-43851
Confirmed fixed CVEs
Not specified
Updated in this feed
4 Nov 2026, 13:49 UTC · Revision 1

Source evidence

GHSL-2025-021_Retrieval-based-Voice-Conversion-WebUI

core-osv · Original source

Published 5 May 2025, 18:21 UTC

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The model_choose variable takes user input (e.g. a path to a model) and passes it to the uvr function in vr.py. In uvr , a new instance of AudioPre class is created with the model_path attribute containing the aformentioned user input. In the AudioPre class, the user input, is used to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist.

osv:CVE-2025-43851
Complete source record
{
  "id": "159e24bb097d103a01dfdd11a1521a42dc7a1b3d879b4a78a8820858a75eaaab",
  "url": "https://osv.dev/vulnerability/CVE-2025-43851",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "GHSL-2025-021_Retrieval-based-Voice-Conversion-WebUI",
    "summary": "Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The model_choose variable takes user input (e.g. a path to a model) and passes it to the uvr function in vr.py. In uvr , a new instance of AudioPre class is created with the model_path attribute containing the aformentioned user input. In the AudioPre class, the user input, is used to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist.",
    "evidence": "osv:CVE-2025-43851",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2025-43851",
      "aliases": [
        "CVE-2025-43851"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/rvc-project/retrieval-based-voice-conversion-webui",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "9f2f0559e6932c10c48642d404e7d2e771d9db43"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "2.2.231006"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StringRangeExpression"
                  },
                  {
                    "cpe": "cpe:2.3:a:rvc-project:retrieval-based-voice-conversion-webui:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "2.2.231006"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "2.2.231006",
            "2.1.230814",
            "2.0.230618",
            "2.0.230528",
            "1.2.230428",
            "1.1.230416",
            "1.0.230410"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-43851.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:35.804091625Z",
      "provider": "osv",
      "references": [
        "https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/7ef19867780cf703841ebafb565a4e47d1ea86ff/infer/modules/onnx/export.py#L7",
        "https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/9f2f0559e6932c10c48642d404e7d2e771d9db43/infer-web.py#L1073",
        "https://github.com/RVC-Project/Retrieval-based-Voice-Conversion-WebUI/blob/9f2f0559e6932c10c48642d404e7d2e771d9db43/infer-web.py#L1098",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43851.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-43851",
        "https://securitylab.github.com/advisories/GHSL-2025-012_GHSL-2025-022_Retrieval-based-Voice-Conversion-WebUI/"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-502"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/43xxx/CVE-2025-43851.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-43851",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 503309,
  "published_at": "2025-05-05T18:21:16.294+00:00"
}