A critical OS command injection vulnerability in OpenTalker SadTalker allows unauthenticated remote attackers to execute arbitrary code on the underlying host system.

This vulnerability occurs because the application uses the os.system function to execute ffmpeg commands, incorporating user-provided audio filenames without proper sanitization. An unauthenticated attacker can inject shell metacharacters into the filename to break out of the intended command string and execute arbitrary commands with the privileges of the application process.

The ability to execute arbitrary system commands poses a severe risk to organizational security, as it facilitates full system compromise, unauthorized data exfiltration, and lateral movement within the network. Given the CVSS score of 9.8, this vulnerability is classified as critical, as it requires no authentication or user interaction to exploit, effectively granting an attacker complete control over the affected server.

Immediate Action: Upgrade to the latest version of SadTalker as soon as a patch is released by the vendor to remediate the unsafe use of os.system. If no update is available, restrict access to the video generation interface to trusted users only.

Proactive Monitoring: Monitor system logs for suspicious process creation events, particularly those involving ffmpeg or unexpected shell commands originating from the web application user.

Compensating Controls: Implement a Web Application Firewall (WAF) to inspect incoming file upload requests for shell metacharacters and block any requests attempting to pass malicious filenames to the backend.

Public Exploit Available: No

Due to the critical nature of this command injection vulnerability, organizations should prioritize the immediate identification of all instances of SadTalker within their environment. Until a vendor-supplied patch is applied, it is highly recommended to isolate the affected service from public networks and restrict access to prevent exploitation.