SadTalker has an OS command injection flaw in the video‑muxing step where the filename of an uploaded audio file is inserted directly into an ffmpeg command without escaping. An attacker can craft a filename that contains shell metacharacters, causing the ffmpeg command to terminate its quoted argument and execute an arbitrary system command when the video is generated. This flaw can lead to full compromise of the host system, permitting an attacker to read files, modify data, or further pivot within the environment. The weakness is a classic operating‑system command injection (CWE‑78).

The affected product is OpenTalker’s SadTalker application. Detailed version information is not provided in the advisory, so all releases before a patch that sanitizes audio filenames are considered vulnerable.

The CVSS score of 9.3 reflects the high severity of this flaw. The EPSS score is 1%, but the lack of a KEV listing does not reduce the risk. Attackers can likely exploit the vulnerability by uploading a maliciously named audio file through the public or internal upload interface, which triggers the vulnerable ffmpeg invocation during video creation. The vulnerability is remotely exploitable without needing elevated privileges, making it a priority for immediate remediation.