TI-2026-31729 CVE-2026-43624 · GHSA-93wx-x4m2-5c8f
F5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()
Priority MEDIUM 45
F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauthenticated attackers to write arbitrary files by passing unsanitized user-supplied project names dire…