---
id: CVE-2026-85696
title: >-
  SadTalker contains an OS command injection vulnerability in the video muxing
  process where uploaded audio filenames are interpolated into ffmpeg commands
  without proper escaping
summary: >-
  SadTalker contains an OS command injection vulnerability in the video muxing
  process where uploaded audio filenames are interpolated into ffmpeg commands
  without proper escaping. Attackers can upload audio files with shell
  metacharacters…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-78
vendor: OpenTalker
product: SadTalker
affected:
  - SadTalker <= 0.0.2
published: '2026-09-04'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T16:18:01.167'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-85696'
references:
  - url: 'https://github.com/OpenTalker/SadTalker'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/OpenTalker/SadTalker/blob/v0.0.2/src/utils/videoio.py'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/OpenTalker/SadTalker/issues/1043'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/sadtalker-os-command-injection-via-audio-filename
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-09-10T14:27:52.360234Z'
epss: 0.01485
epssPercentile: 0.72915
ingestedAt: '2026-09-10T15:53:17.107Z'
---

## Overview

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters in the filename to break out of quoted arguments and execute arbitrary system commands when video generation occurs.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.