CVE-2025-49840 | RVC-Boss GPT-SoVITS up to 20250228v3 inference_webui.py change_gpt_weights GPT_dropdown deserialization (GHSL-2025-049)

A vulnerability was found in RVC-Boss GPT-SoVITS up to 20250228v3. It has been declared as critical. Affected by this vulnerability is the function change_gpt_weights of the file inference_webui.py. The manipulation of the argument GPT_dropdown leads to deserialization.

This vulnerability is known as CVE-2025-49840. The attack can be launched remotely. Furthermore, there is an exploit available.