SadTalker vulnerabilities

CVEs whose affected-version data names the SadTalker package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85696Critical· 9.8

2w ago

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping

SadTalker contains an OS command injection vulnerability in the video muxing process where uploaded audio filenames are interpolated into ffmpeg commands without proper escaping. Attackers can upload audio files with shell metacharacters…

▾ MidnightOpenTalker · SadTalkerEPSS 1.5%via NVD