Retrieval-Based Voice Conversion WebUI Unsafe Deserialization Vulnerability Allowing Remote Code Execution

A vulnerability exists in Retrieval-Based Voice Conversion WebUI, specifically in versions through 2.2.231006, due to unsafe deserialization of user-provided model paths. This flaw allows for remote code execution. The issue arises in the 'process_ckpt.py' file, where the 'ckpt_a' and 'ckpt_b' variables, among others, are used to load models with 'torch.load'. This deserialization can be exploited by manipulating the input paths to execute arbitrary code on the server.

Impact

Exploitation of this vulnerability can lead to remote code execution on the server where the application is running.

Reproduction

To reproduce this vulnerability, upload a malicious model file to a location accessible by the application. Then, use the web interface to select this model, ensuring to choose options that trigger the vulnerable 'merge' function in 'process_ckpt.py'. The application will load the model using 'torch.load', executing any embedded code.