---
id: "CVE-2026-112078"
kind: "vulnerability"
aliases: ["CVE-2026-112078"]
title: "RVC WebUI: manipulated ckpt_path argument lets remote attackers inject code"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "python", "rvc", "self-hosted", "voice-conversion"]
not_affected_if: ["local-only-access"]
published_at: "2026-10-19T05:17:04+00:00"
first_seen_at: "2026-10-23T21:57:17+00:00"
updated_at: "2026-10-25T03:23:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112078", "first_seen_at": "2026-10-23T21:57:17+00:00"}]
---

# RVC WebUI: manipulated ckpt_path argument lets remote attackers inject code

Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718 fails to validate the ckpt_path argument in the change_info_ function of webui.py. A remote attacker can use a crafted value to inject code that runs on the host.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of Retrieval-based-Voice-Conversion-WebUI against `2.3.260718`
- Look for webui.py exposed on a reachable network address, for example the Gradio port
- unknown for other checks

## Fix

- No fixed version is known; the project has not responded to the report
- Restrict access to the WebUI to trusted networks or put it behind authentication
- unknown for a patched release

## Timeline

- 2026-10-23T21:57:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112078

## From the sources

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change_info_ of the file webui.py. Executing a manipulation of the argument ckpt_path can lead to code injection. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_