by Kastro
Paper/Archive/CVE-2026-85696

CVE-2026-85696

OpenTalker SadTalker — SadTalker OS Command Injection via Audio Filename

EPSS 3%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 85.2.852 × 2017.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.

Affected

ProductAffectedFixed inSource
SadTalker≤ 0.0.2–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/OpenTalker/SadTalker/issues/1043refgithub.com/OpenTalker/SadTalkerwriteupgithub.com/OpenTalker/SadTalker/blob/v0.0.2/src/utils/videoio.pywriteupvulncheck.com/advisories/sadtalker-os-command-injection-via-audio-filename