GPT-SoVITS version 20250606v2pro includes an OS command injection flaw located in the webui.py module; functions such as ASR, slice, denoise, and uvr5 interpolate raw Gradio textbox input directly into shell commands executed with shell=True. The flaw is classified as CWE-78 and allows an attacker to inject shell metacharacters through path parameters, causing execution as the server process user and enabling remote code execution without authentication.

The vulnerable implementation is present in the RVC-Boss GPT-SoVITS release 20250606v2pro; any deployment running this exact version is affected. The likely earlier releases might also contain this flaw if they include the same webui.py code path, but only 20250606v2pro is confirmed to be vulnerable.

The CVSS score of 9.3 reflects critical severity, while the EPSS score of 2% indicates a low but non‑zero probability of exploitation. The vulnerability is not yet listed in the CISA KEV catalog, suggesting no known large‑scale attacks, but the lack of authentication and the ability to trigger the flaw remotely make it highly exploitable. Immediate remediation is warranted due to the potential for complete system compromise.