Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-85696: SadTalker lets attackers run commands via crafted audio file names
CVE-2026-85696 · published today
Summary
SadTalker inserts the name of an uploaded audio file directly into a video‑creation command without cleaning it first. If a malicious user gives the file a name that includes special characters, the system can be tricked into running any command it wants when it creates the video. Update SadTalker to a version that properly sanitizes file names or apply a filter that removes unsafe characters from uploaded filenames.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| opentalker | sadtalker | <= 0.0.2 |
Original advisory text
SadTalker OS Command Injection via Audio Filename
SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.
References
- https://github.com/OpenTalker/SadTalker product
- https://github.com/OpenTalker/SadTalker/blob/v0.0.2/src/utils/videoio.py technical-description
- https://github.com/OpenTalker/SadTalker/issues/1043 issue-tracking
- https://www.vulncheck.com/advisories/sadtalker-os-command-injection-via-audio-fi... third-party-advisory
Severity
9.3
Critical
CVSS 3.1: 9.8 (NVD)
CVSS 4.0: 9.3 (NVD)
Type
CWE-78OS Command Injection
Timeline
Published4 Sep 2026
Updated4 Sep 2026
First seen4 Sep 2026
Monitor software like this
Free during beta