Skip to content
OpenAdvisories

Vendor

OpenTalker

1 known vulnerabilities.

Products

SadTalker 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-85696

    SadTalker OS Command Injection via Audio Filename

    SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to br…

    OpenTalker SadTalker