TI-2026-46835 CVE-2026-65701 · GHSA-cc9w-9gmw-9p6j
SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Route
Priority HIGH 79
SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inference server that allows unauthenticated remote attackers to read and exfiltrate arbitrary files by…