Loading story…
GPT-SoVITS from RVC-Boss is affected by CVE-2026-63766, an unauthenticated OS command injection flaw in webui.py that can let remote attackers execute arbitrary commands on the host. The vulnerability affects versions through 20250606v2pro and stems from multiple WebUI functions building shell commands from Gradio textbox path inputs and executing them with shell=True, exposing the server process to attacker-controlled input.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
The GPT-SoVITS OS command injection flaw was published as CVE-2026-63766, affecting versions through 20250606v2pro. The advisory described unauthenticated arbitrary command execution via unsanitized path parameters in webui.py and classified the issue as CWE-78 with a high-severity CVSS score.
A GitHub issue disclosed an unauthenticated remote command execution flaw in GPT-SoVITS's training/preprocess WebUI, caused by interpolating Gradio textbox path inputs into shell commands executed with shell=True. The report said the issue affected multiple functions including ASR, slice, denoise, and uvr5, and noted the WebUI binds to 0.0.0.0 without authentication.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcevulncheck.com
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A critical vulnerability in NASA/JPL’s open-source **AMMOS Instrument Toolkit GUI (AIT-GUI)** could allow unauthenticated attackers to issue spacecraft and instrument commands, execute server-side scripts, and launch command sequences through exposed web endpoints. The flaw, tracked as **`GHSA-p9r8-2q67-fp86`** and rated **CVSS 9.4**, affects AIT-GUI versions through **2.5.1** and was fixed in **2.5.2**. Researchers said the application binds its HTTP server to **`0.0.0.0`**, effectively exposing the interface on all network interfaces, while sensitive API routes lack authentication, authorization, and CSRF protections. The vulnerable endpoints reportedly include **`POST /cmd`** for arbitrary command relay, **`POST /script/run`** for server-side script execution, and **`POST /seq`** for sequence execution, with the latter two also affected by path traversal due to unsafe path handling. Because the endpoints accept form-encoded requests, an operator visiting a malicious website could be induced to send cross-origin requests from their browser, enabling attacks even against host-local or otherwise firewalled deployments. Security researchers urged users to upgrade to **AIT-GUI 2.5.2** immediately and keep the service port off untrusted networks.
Aug 22, 2026
Dell disclosed **CVE-2026-67261**, a critical OS command injection flaw in **Dell Virtual Storage Integrator (VSI) for VMware vSphere Client** that affects versions prior to **10.11.1.0**. The vulnerability is located in the **IAPI** component and can be exploited **remotely without authentication**, allowing an attacker to execute arbitrary operating system commands with **root privileges**. The issue is tracked as **CWE-78** and carries a **CVSS v3.1** vector of `AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, indicating a high likelihood of full compromise. Dell warned that successful exploitation could lead to complete takeover of the VSI deployment and potentially expose underlying infrastructure managed through the platform. A related advisory from **CERT-PY** highlighted the vulnerability in Dell products, reinforcing the need for defensive action. Dell has recommended that customers **upgrade to version 10.11.1.0 or later as soon as possible** to remediate the risk.
Aug 16, 2026
A critical security vulnerability has been identified in the MegaSys Enterprises Telenium Online Web Application, allowing unauthenticated attackers to execute arbitrary operating system commands on affected servers. The flaw, tracked as CVE-2025-10659, arises from improper input handling in a PHP endpoint that is accessible over the network without authentication. Specifically, the vulnerability is due to insecure termination of a regular expression check, which fails to adequately validate or sanitize user-supplied input. As a result, attackers can craft malicious HTTP requests that inject OS commands, leading to remote code execution within the security context of the web application service account. The vulnerability affects Telenium Online Web Application versions 8.4.21 and prior, as confirmed by both CVE and CISA advisories. The issue is classified as an OS command injection (CWE-78), a category of vulnerabilities known for their high impact and ease of exploitation. The CVSS v3.1 base score for this vulnerability is 9.8, indicating a critical risk, while a CVSS v4 score of 9.3 further underscores its severity. The vulnerability is remotely exploitable and requires no user interaction or authentication, making it particularly dangerous for internet-exposed systems. Successful exploitation could allow attackers to gain control over the affected server, potentially leading to data theft, service disruption, or lateral movement within the network. The vulnerability was disclosed by ics-cert@hq.dhs.gov and has been publicly documented in both CVE and CISA ICS advisories. Organizations using the Telenium Online Web Application are strongly advised to review their deployments and apply any available patches or mitigations. The advisories do not specify the exact versions affected beyond 8.4.21 and prior, so all users of the product should consider themselves at risk until further information is available. No reports of exploitation in the wild have been confirmed at the time of the advisories' publication, but the low attack complexity and high impact make rapid remediation essential. The vulnerability highlights the ongoing risks associated with improper input validation in web applications, especially those used in industrial control system environments. Security teams should prioritize network segmentation and monitoring for unusual HTTP request patterns targeting the vulnerable endpoint. The incident serves as a reminder of the importance of secure coding practices and regular security assessments for critical infrastructure software.
Jun 29, 2026