Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-43624

F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names directly to os.path.join() without validating the resulting path stays within the intended base directory. Attackers can supply absolute path arguments such as /tmp/EVIL to override the base directory entirely and create arbitrary directories with attacker-controlled JSON content at any filesystem path writable by the server process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SWivid F5-TTS

Default version status: affected

  • 0 to ≤ 1.1.20affected
  • 2f53ded68e5f69e248ceb200a51ef4d1dc647936unaffected
pkg:github/SWivid/F5-TTS

References