Vulnerability Description
SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/OpenTalker/SadTalker
- https://github.com/OpenTalker/SadTalker/blob/v0.0.2/src/utils/videoio.py
- https://github.com/OpenTalker/SadTalker/issues/1043
- https://www.vulncheck.com/advisories/sadtalker-os-command-injection-via-audio-fi
FAQ
What is CVE-2026-85696?
CVE-2026-85696 is a vulnerability with a CVSS score of 9.8 (CRITICAL). SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload ...
How severe is CVE-2026-85696?
CVE-2026-85696 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-85696?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.