GPT-SoVITS up to the 20250606v2pro release contains a vulnerable script in tools/uvr5/vr.py that permits OS command injection through the WebUI output folder text boxes. By entering shell substitutions such as $(…) into the mp3 or m4a export fields, an unauthenticated attacker can cause arbitrary commands to run with the privileges of the server process. This flaw enables full control over the host system, exposing all confidential data, allowing modification of critical files, and potentially disrupting service availability. The weakness is a classic command injection issue identified as CWE‑78.

The affected platform is the RVC‑Boss GPT‑SoVITS WebUI. All releases through and including the 20250606v2pro version are vulnerable. Users running a newer version released after this date should verify whether the patch was applied; earlier or same‑or‑older versions remain at risk.

The base score of 9.3 denotes a critical severity with universal availability and full user interaction. The EPSS score of 3% indicates a low but non-zero likelihood of exploitation, suggesting that the vulnerability is not widely exploited yet. The lack of a KEV listing supports this view. The likely path is an unauthenticated HTTP request to the UI where the output folder parameter is reflected into an OS command. Given these factors, the risk remains high until a validated fix or strong mitigating controls are deployed.