{"id":"CVE-2026-112078","kind":"vulnerability","aliases":["CVE-2026-112078"],"related":[],"title":"RVC WebUI: manipulated ckpt_path argument lets remote attackers inject code","description":"A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change_info_ of the file webui.py. Executing a manipulation of the argument ckpt_path can lead to code injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.","summary":"Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718 fails to validate the ckpt_path argument in the change_info_ function of webui.py. A remote attacker can use a crafted value to inject code that runs on the host.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","python","rvc","self-hosted","voice-conversion"],"not_affected_if":["local-only-access"],"how_to_check":"- Check the installed version of Retrieval-based-Voice-Conversion-WebUI against `2.3.260718`\n- Look for webui.py exposed on a reachable network address, for example the Gradio port\n- unknown for other checks","fix":"- No fixed version is known; the project has not responded to the report\n- Restrict access to the WebUI to trusted networks or put it behind authentication\n- unknown for a patched release","status":"open","published_at":"2026-10-19T05:17:04+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","triaged_at":"2026-10-25T03:23:22+00:00","updated_at":"2026-10-25T03:23:22+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-25T03:23:22Z","model":"claude-haiku-5-5","output":{"fix":"- No fixed version is known; the project has not responded to the report\n- Restrict access to the WebUI to trusted networks or put it behind authentication\n- unknown for a patched release","reach":"internet","title":"RVC WebUI: manipulated ckpt_path argument lets remote attackers inject code","impact":"high","summary":"Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718 fails to validate the ckpt_path argument in the change_info_ function of webui.py. A remote attacker can use a crafted value to inject code that runs on the host.","category":"ai-tooling","nicknames":[],"who_cares":["python","self-hosted","voice-conversion","rvc"],"confidence":0.6,"needs_auth":"unknown","worst_case":"code runs on the server hosting the WebUI","analyst_note":"Confirm the exact fixed version or mitigation and whether authentication is required; source is https://nvd.nist.gov/vuln/detail/CVE-2026-112078.","how_to_check":"- Check the installed version of Retrieval-based-Voice-Conversion-WebUI against `2.3.260718`\n- Look for webui.py exposed on a reachable network address, for example the Gradio port\n- unknown for other checks","needs_analyst":true,"not_affected_if":["local-only-access"],"who_is_affected":"Teams running RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718 where the web interface is reachable by others. The sources do not say whether the flaw needs a default or special configuration. Teams that do not run this project can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000633,"input_tokens":3360,"output_tokens":594,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-112078':14A,17A '-2026':13A,16A '2.3.260718':37B,85C 'ai':19B 'ai-tool':18B 'argument':6A,44B,101C 'attack':9A,54B,110C 'base':31B,79C 'chang':47B,90C 'ckpt':4A,42B,102C 'code':11A,62B,107C 'convers':28B,33B,81C 'craft':58B 'cve':12A,15A 'earli':131C 'execut':96C,113C 'exploit':116C 'fail':38B 'file':94C 'flaw':69C 'found':72C 'function':49B,89C 'host':25B,67B 'impact':86C 'info':48B,91C 'inform':127C 'inject':10A,61B,108C 'issu':134C 'lead':105C 'let':7A 'manipul':3A,98C 'may':121C 'path':5A,43B,103C 'problem':130C 'project':76C,125C 'publish':119C 'python':21B 'remot':8A,53B,114C 'report':135C 'respond':139C 'retriev':30B,78C 'retrieval-based-voice-conversion-webui':29B,77C 'run':64B 'rvc':1A,22B,75C 'rvc-project':74C 'self':24B 'self-host':23B 'tool':20B 'use':56B,123C 'valid':40B 'valu':59B 'voic':27B,32B,80C 'voice-convers':26B 'webui':2A,34B,82C 'webui.py':51B,95C 'yet':140C","nicknames":[],"mitigations":[],"who_affected":"Teams running RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718 where the web interface is reachable by others. The sources do not say whether the flaw needs a default or special configuration. Teams that do not run this project can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T05:17:04+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112078","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112078","severity":null,"published_at":"2026-10-19T05:17:04+00:00","modified_at":"2026-10-19T17:17:10+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}