Unsafe Deserialization Vulnerability in Retrieval-based Voice Conversion WebUI by RVC Project

CVE-2025-43850

What is CVE-2025-43850?

The Retrieval-based Voice Conversion WebUI framework is susceptible to an unsafe deserialization vulnerability. Specifically, when the ckpt_dir variable accepts user input—such as a model path—it is subsequently processed by the change_info function in export.py. This function uses torch.load to load models from the provided path, potentially allowing attackers to execute arbitrary code remotely. As of now, there are no available patches to mitigate this risk, making it imperative for users to be aware of the threat and take appropriate defensive measures.

References