The vulnerability in so-vits-svc involves improper limitation of a pathname to a restricted directory, enabling path traversal attacks. Specifically, unauthenticated attackers can supply arbitrary filesystem paths via the audio_path field in POST requests to the /wav2wav endpoint. These paths are used verbatim in calls to librosa.load, torchaudio.load, and soundfile.write, allowing attackers to read arbitrary files from the server and write .wav files to arbitrary locations. This results in unauthorized file disclosure and arbitrary file write capabilities without any authentication or user interaction required.

Successful exploitation allows unauthenticated remote attackers to read sensitive files from the server filesystem and write arbitrary .wav files to any location on the server. This can lead to data leakage, potential disruption of server operations, and may facilitate further attacks depending on the server environment and file permissions. The CVSS 4.0 base score is 9.3 (critical), reflecting the high impact and ease of exploitation without privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /wav2wav endpoint to trusted users or networks, and implement input validation or filtering on the audio_path parameter to prevent path traversal. Monitor for suspicious requests targeting this endpoint. Do not expose the inference server publicly without proper access controls.