Unsafe Deserialization Vulnerability in Retrieval-based Voice Conversion Framework by RVC Project

CVE-2025-43852

What is CVE-2025-43852?

The Retrieval-based Voice Conversion WebUI is vulnerable due to unsafe deserialization practices. In versions up to 2.2.231006, user input is processed without proper validation. Specifically, the model_choose variable allows users to input the path to a model, which is subsequently passed to the uvr function in vr.py. If the input contains the string 'DeEcho', it creates a new instance of the AudioPreDeEcho class with the user-defined model_path. The AudioPreDeEcho class then utilizes torch.load to load the model, leading to potential remote code execution. At the time of reporting, there are no known patches or fixes available.

References