CVE-2026-85696CWE-78command-injection

CVE-2026-85696

Critical · published September 4, 2026

CVSS v3.1
9.8
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.02574 · 85.1th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-09-04T19:17Z
References (4)
https://github.com/OpenTalker/SadTalker · [email protected]https://github.com/OpenTalker/SadTalker/blob/v0.0.2/src/utils/videoio.py · [email protected]https://github.com/OpenTalker/SadTalker/issues/1043 · [email protected]https://www.vulncheck.com/advisories/sadtalker-os-command-injection-via-audio-filename · [email protected]
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 1%
    epss
  • 04 SEP 14:32Z
    SadTalker OS Command Injection via Audio Filename
    cvelistv5