CVE-2025-27778: Applio

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `infer.py`. The issue can lead to remote code execution. As of time of publication, a fix is available on the `main` branch of the Applio repository but not attached to a numbered release.

Affected products

• Applio Applio: up to and including 3.2.8-bugfix

Published 2025-03-19. Last modified 2026-06-17.