CVE-2025-5148 in InspireMusic
Summary
by MITRE • 05/25/2025
A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the function load_state_dict of the file inspiremusic/cli/model.py of the component Pickle Data Handler. The manipulation leads to deserialization. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 784cbf8dde2cf1456ff808aeba23177e1810e7a9. It is recommended to apply a patch to fix this issue.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 05/27/2025
This critical vulnerability in FunAudioLLM InspireMusic presents a severe deserialization flaw within the Pickle Data Handler component that poses significant security risks to affected systems. The vulnerability specifically resides in the load_state_dict function located in the inspiremusic/cli/model.py file, where improper handling of serialized data creates an attack surface that can be exploited through malicious pickle data manipulation. The issue affects the rolling release versioning system of the software, making it challenging to determine exact affected versions since the product continuously delivers updates without traditional version tagging. This particular vulnerability has been classified as critical due to its potential for remote code execution when exploited, though the attack vector requires local system access, which limits its scope but does not eliminate the serious implications for compromised systems.
The technical nature of this flaw aligns with common software security weaknesses identified under CWE-502, which covers deserialization of untrusted data, and represents a direct violation of secure coding practices for handling serialized objects. When the load_state_dict function processes pickle data, it fails to properly validate or sanitize the input before deserializing it, creating an opportunity for attackers to craft malicious pickle payloads that can execute arbitrary code on the target system. The ATT&CK framework categorizes this vulnerability under T1203 - Exploitation for Client Execution, as it enables attackers to leverage deserialization vulnerabilities to gain unauthorized code execution capabilities within the application's runtime environment. This type of vulnerability is particularly dangerous because pickle deserialization attacks can bypass many traditional security controls and are often difficult to detect through standard network monitoring tools.
The operational impact of this vulnerability extends beyond simple code execution, as it can enable full system compromise when combined with local access privileges that attackers typically acquire through other means such as privilege escalation or initial foothold exploitation. Organizations running affected versions of FunAudioLLM InspireMusic face potential data breaches, system takeover, and complete loss of control over affected endpoints. The rolling release methodology of the product compounds the risk by making it difficult to maintain accurate inventory of vulnerable systems and track patch deployment across different installations. The recommended patch identified by the commit hash 784cbf8dde2cf1456ff808aeba23177e1810e7a9 represents a crucial remediation step that addresses the core deserialization issue by implementing proper input validation and sanitization mechanisms for pickle data handling. System administrators should prioritize immediate patch application and implement additional monitoring measures to detect potential exploitation attempts, while also reviewing access controls and privilege management to minimize the attack surface available to potential adversaries.